(Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [main] (0x0400): ldap_child started. (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [main] (0x2000): context initialized (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [unpack_buffer] (0x1000): total buffer size: 57 (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [unpack_buffer] (0x1000): realm_str size: 17 (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [unpack_buffer] (0x1000): got realm_str: CHILD1.SSSDAD.COM (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [unpack_buffer] (0x1000): princ_str size: 16 (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [unpack_buffer] (0x1000): got princ_str: BKR-HV03-GUEST1$ (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [unpack_buffer] (0x1000): keytab_name size: 0 (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [unpack_buffer] (0x1000): lifetime: 86400 (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [unpack_buffer] (0x0200): Will run as [0][0]. (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [privileged_krb5_setup] (0x2000): Kerberos context initialized (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [main] (0x2000): Kerberos context initialized (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [become_user] (0x0200): Trying to become user [0][0]. (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [become_user] (0x0200): Already user [0]. (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [main] (0x2000): Running as [0][0]. (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [main] (0x2000): getting TGT sync (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [ldap_child_get_tgt_sync] (0x2000): got realm_name: [CHILD1.SSSDAD.COM] (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [ldap_child_get_tgt_sync] (0x0100): Principal name is: [BKR-HV03-GUEST1$@CHILD1.SSSDAD.COM] (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [ldap_child_get_tgt_sync] (0x0100): Using keytab [MEMORY:/etc/krb5.keytab] (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47743: Getting initial credentials for BKR-HV03-GUEST1$@CHILD1.SSSDAD.COM (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47744: Looked up etypes in keytab: aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac, des, des-cbc-crc, des-cbc-crc (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47746: Sending request (213 bytes) to CHILD1.SSSDAD.COM (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47747: Sending initial UDP request to dgram 10.8.63.35:88 (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47748: Received answer (232 bytes) from dgram 10.8.63.35:88 (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47749: Response was from master KDC (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47750: Received error from KDC: -1765328359/Additional pre-authentication required (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47753: Processing preauth types: 16, 15, 19, 2 (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47754: Selected etype info: etype aes256-cts, salt "CHILD1.SSSDAD.COMhostbkr-hv03-guest1.child1.sssdad.com", params "" (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47755: Retrieving BKR-HV03-GUEST1$@CHILD1.SSSDAD.COM from MEMORY:/etc/krb5.keytab (vno 0, enctype aes256-cts) with result: 0/Success (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47756: AS key obtained for encrypted timestamp: aes256-cts/381E (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47758: Encrypted timestamp (for 1512478210.57644): plain 301AA011180F32303137313230353132353031305AA105020300E12C, encrypted CE2A68BF56D951C1351F11365EFB4CADEE2A44A4D579176241DAE67F9DDE32E5BA1366E57D13A0CAA6186FC4677A01CA56CBF2B162119A17 (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47759: Preauth module encrypted_timestamp (2) (real) returned: 0/Success (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47760: Produced preauth for next request: 2 (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47761: Sending request (293 bytes) to CHILD1.SSSDAD.COM (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47762: Sending initial UDP request to dgram 10.8.63.35:88 (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47763: Received answer (106 bytes) from dgram 10.8.63.35:88 (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47764: Response was from master KDC (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47765: Received error from KDC: -1765328332/Response too big for UDP, retry with TCP (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47766: Request or response is too big for UDP; retrying with TCP (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47767: Sending request (293 bytes) to CHILD1.SSSDAD.COM (tcp only) (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47768: Initiating TCP connection to stream 10.8.63.35:88 (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47769: Sending TCP request to stream 10.8.63.35:88 (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47770: Received answer (1578 bytes) from stream 10.8.63.35:88 (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47771: Terminating TCP connection to stream 10.8.63.35:88 (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47772: Response was from master KDC (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47773: Processing preauth types: 19 (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47774: Selected etype info: etype aes256-cts, salt "CHILD1.SSSDAD.COMhostbkr-hv03-guest1.child1.sssdad.com", params "" (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47775: Produced preauth for next request: (empty) (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47776: AS key determined by preauth: aes256-cts/381E (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47777: Decrypted AS reply; session key is: aes256-cts/70FD (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47778: FAST negotiation: unavailable (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [ldap_child_get_tgt_sync] (0x2000): credentials initialized (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [ldap_child_get_tgt_sync] (0x2000): keytab ccname: [FILE:/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_G6yfRY] (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47779: Initializing FILE:/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_G6yfRY with default princ BKR-HV03-GUEST1$@CHILD1.SSSDAD.COM (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [sss_child_krb5_trace_cb] (0x4000): [25607] 1512478210.47780: Storing BKR-HV03-GUEST1$@CHILD1.SSSDAD.COM -> krbtgt/CHILD1.SSSDAD.COM@CHILD1.SSSDAD.COM in FILE:/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_G6yfRY (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [ldap_child_get_tgt_sync] (0x2000): credentials stored (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [ldap_child_get_tgt_sync] (0x2000): Got KDC time offset (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [ldap_child_get_tgt_sync] (0x2000): Renaming [/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_G6yfRY] to [/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM] (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [unique_filename_destructor] (0x2000): Unlinking [/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_G6yfRY] (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [unlink_dbg] (0x2000): File already removed: [/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_G6yfRY] (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [prepare_response] (0x0400): Building response for result [0] (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [pack_buffer] (0x2000): response size: 65 (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [pack_buffer] (0x1000): result [0] krberr [0] msgsize [45] msg [FILE:/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM] (Tue Dec 5 07:50:10 2017) [[sssd[ldap_child[25607]]]] [main] (0x0400): ldap_child completed successfully (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [main] (0x0400): ldap_child started. (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [main] (0x2000): context initialized (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [unpack_buffer] (0x1000): total buffer size: 57 (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [unpack_buffer] (0x1000): realm_str size: 17 (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [unpack_buffer] (0x1000): got realm_str: CHILD1.SSSDAD.COM (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [unpack_buffer] (0x1000): princ_str size: 16 (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [unpack_buffer] (0x1000): got princ_str: BKR-HV03-GUEST1$ (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [unpack_buffer] (0x1000): keytab_name size: 0 (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [unpack_buffer] (0x1000): lifetime: 86400 (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [unpack_buffer] (0x0200): Will run as [0][0]. (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [privileged_krb5_setup] (0x2000): Kerberos context initialized (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [main] (0x2000): Kerberos context initialized (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [become_user] (0x0200): Trying to become user [0][0]. (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [become_user] (0x0200): Already user [0]. (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [main] (0x2000): Running as [0][0]. (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [main] (0x2000): getting TGT sync (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [ldap_child_get_tgt_sync] (0x2000): got realm_name: [CHILD1.SSSDAD.COM] (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [ldap_child_get_tgt_sync] (0x0100): Principal name is: [BKR-HV03-GUEST1$@CHILD1.SSSDAD.COM] (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [ldap_child_get_tgt_sync] (0x0100): Using keytab [MEMORY:/etc/krb5.keytab] (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159265: Getting initial credentials for BKR-HV03-GUEST1$@CHILD1.SSSDAD.COM (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159266: Looked up etypes in keytab: aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac, des, des-cbc-crc, des-cbc-crc (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159268: Sending request (213 bytes) to CHILD1.SSSDAD.COM (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159269: Sending initial UDP request to dgram 10.8.63.35:88 (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159270: Received answer (232 bytes) from dgram 10.8.63.35:88 (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159271: Response was from master KDC (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159272: Received error from KDC: -1765328359/Additional pre-authentication required (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159275: Processing preauth types: 16, 15, 19, 2 (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159276: Selected etype info: etype aes256-cts, salt "CHILD1.SSSDAD.COMhostbkr-hv03-guest1.child1.sssdad.com", params "" (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159277: Retrieving BKR-HV03-GUEST1$@CHILD1.SSSDAD.COM from MEMORY:/etc/krb5.keytab (vno 0, enctype aes256-cts) with result: 0/Success (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159278: AS key obtained for encrypted timestamp: aes256-cts/381E (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159280: Encrypted timestamp (for 1512478211.182622): plain 301AA011180F32303137313230353132353031315AA105020302C95E, encrypted 467DB11DDC2136686AF556F120B2D3A7AAB1716E769A4E9F3FA7E503B680D84A04BB0641E86CAE3F41B13E34F3E63E579015A23780772686 (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159281: Preauth module encrypted_timestamp (2) (real) returned: 0/Success (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159282: Produced preauth for next request: 2 (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159283: Sending request (293 bytes) to CHILD1.SSSDAD.COM (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159284: Sending initial UDP request to dgram 10.8.63.35:88 (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159285: Received answer (106 bytes) from dgram 10.8.63.35:88 (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159286: Response was from master KDC (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159287: Received error from KDC: -1765328332/Response too big for UDP, retry with TCP (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159288: Request or response is too big for UDP; retrying with TCP (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159289: Sending request (293 bytes) to CHILD1.SSSDAD.COM (tcp only) (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159290: Initiating TCP connection to stream 10.8.63.35:88 (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159291: Sending TCP request to stream 10.8.63.35:88 (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159292: Received answer (1578 bytes) from stream 10.8.63.35:88 (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159293: Terminating TCP connection to stream 10.8.63.35:88 (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159294: Response was from master KDC (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159295: Processing preauth types: 19 (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159296: Selected etype info: etype aes256-cts, salt "CHILD1.SSSDAD.COMhostbkr-hv03-guest1.child1.sssdad.com", params "" (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159297: Produced preauth for next request: (empty) (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159298: AS key determined by preauth: aes256-cts/381E (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159299: Decrypted AS reply; session key is: aes256-cts/45C7 (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159300: FAST negotiation: unavailable (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [ldap_child_get_tgt_sync] (0x2000): credentials initialized (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [ldap_child_get_tgt_sync] (0x2000): keytab ccname: [FILE:/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_psW3R7] (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159301: Initializing FILE:/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_psW3R7 with default princ BKR-HV03-GUEST1$@CHILD1.SSSDAD.COM (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [sss_child_krb5_trace_cb] (0x4000): [25609] 1512478211.159302: Storing BKR-HV03-GUEST1$@CHILD1.SSSDAD.COM -> krbtgt/CHILD1.SSSDAD.COM@CHILD1.SSSDAD.COM in FILE:/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_psW3R7 (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [ldap_child_get_tgt_sync] (0x2000): credentials stored (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [ldap_child_get_tgt_sync] (0x2000): Got KDC time offset (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [ldap_child_get_tgt_sync] (0x2000): Renaming [/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_psW3R7] to [/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM] (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [unique_filename_destructor] (0x2000): Unlinking [/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_psW3R7] (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [unlink_dbg] (0x2000): File already removed: [/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_psW3R7] (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [prepare_response] (0x0400): Building response for result [0] (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [pack_buffer] (0x2000): response size: 65 (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [pack_buffer] (0x1000): result [0] krberr [0] msgsize [45] msg [FILE:/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM] (Tue Dec 5 07:50:11 2017) [[sssd[ldap_child[25609]]]] [main] (0x0400): ldap_child completed successfully (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [main] (0x0400): ldap_child started. (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [main] (0x2000): context initialized (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [unpack_buffer] (0x1000): total buffer size: 57 (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [unpack_buffer] (0x1000): realm_str size: 17 (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [unpack_buffer] (0x1000): got realm_str: CHILD1.SSSDAD.COM (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [unpack_buffer] (0x1000): princ_str size: 16 (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [unpack_buffer] (0x1000): got princ_str: BKR-HV03-GUEST1$ (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [unpack_buffer] (0x1000): keytab_name size: 0 (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [unpack_buffer] (0x1000): lifetime: 86400 (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [unpack_buffer] (0x0200): Will run as [0][0]. (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [privileged_krb5_setup] (0x2000): Kerberos context initialized (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [main] (0x2000): Kerberos context initialized (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [become_user] (0x0200): Trying to become user [0][0]. (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [become_user] (0x0200): Already user [0]. (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [main] (0x2000): Running as [0][0]. (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [main] (0x2000): getting TGT sync (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [ldap_child_get_tgt_sync] (0x2000): got realm_name: [CHILD1.SSSDAD.COM] (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [ldap_child_get_tgt_sync] (0x0100): Principal name is: [BKR-HV03-GUEST1$@CHILD1.SSSDAD.COM] (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [ldap_child_get_tgt_sync] (0x0100): Using keytab [MEMORY:/etc/krb5.keytab] (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478212.982331: Getting initial credentials for BKR-HV03-GUEST1$@CHILD1.SSSDAD.COM (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478212.982332: Looked up etypes in keytab: aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac, des, des-cbc-crc, des-cbc-crc (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478212.982334: Sending request (213 bytes) to CHILD1.SSSDAD.COM (Tue Dec 5 07:50:12 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478212.982335: Sending initial UDP request to dgram 10.8.63.35:88 (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27179: Received answer (232 bytes) from dgram 10.8.63.35:88 (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27180: Response was from master KDC (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27181: Received error from KDC: -1765328359/Additional pre-authentication required (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27184: Processing preauth types: 16, 15, 19, 2 (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27185: Selected etype info: etype aes256-cts, salt "CHILD1.SSSDAD.COMhostbkr-hv03-guest1.child1.sssdad.com", params "" (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27186: Retrieving BKR-HV03-GUEST1$@CHILD1.SSSDAD.COM from MEMORY:/etc/krb5.keytab (vno 0, enctype aes256-cts) with result: 0/Success (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27187: AS key obtained for encrypted timestamp: aes256-cts/381E (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27189: Encrypted timestamp (for 1512478212.995087): plain 301AA011180F32303137313230353132353031325AA10502030F2F0F, encrypted 67F6883A5D58F397900ED405205FFB23472266EB7C94B9EAC996E4DB71712601F7E07DEA4A5AC4D39A99FB837D888215C5C7DD0779C1404E (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27190: Preauth module encrypted_timestamp (2) (real) returned: 0/Success (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27191: Produced preauth for next request: 2 (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27192: Sending request (293 bytes) to CHILD1.SSSDAD.COM (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27193: Sending initial UDP request to dgram 10.8.63.35:88 (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27194: Received answer (106 bytes) from dgram 10.8.63.35:88 (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27195: Response was from master KDC (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27196: Received error from KDC: -1765328332/Response too big for UDP, retry with TCP (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27197: Request or response is too big for UDP; retrying with TCP (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27198: Sending request (293 bytes) to CHILD1.SSSDAD.COM (tcp only) (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27199: Initiating TCP connection to stream 10.8.63.35:88 (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27200: Sending TCP request to stream 10.8.63.35:88 (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27201: Received answer (1578 bytes) from stream 10.8.63.35:88 (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27202: Terminating TCP connection to stream 10.8.63.35:88 (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27203: Response was from master KDC (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27204: Processing preauth types: 19 (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27205: Selected etype info: etype aes256-cts, salt "CHILD1.SSSDAD.COMhostbkr-hv03-guest1.child1.sssdad.com", params "" (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27206: Produced preauth for next request: (empty) (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27207: AS key determined by preauth: aes256-cts/381E (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27208: Decrypted AS reply; session key is: aes256-cts/B8A0 (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27209: FAST negotiation: unavailable (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [ldap_child_get_tgt_sync] (0x2000): credentials initialized (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [ldap_child_get_tgt_sync] (0x2000): keytab ccname: [FILE:/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_1y0QJ8] (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27210: Initializing FILE:/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_1y0QJ8 with default princ BKR-HV03-GUEST1$@CHILD1.SSSDAD.COM (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [sss_child_krb5_trace_cb] (0x4000): [25621] 1512478213.27211: Storing BKR-HV03-GUEST1$@CHILD1.SSSDAD.COM -> krbtgt/CHILD1.SSSDAD.COM@CHILD1.SSSDAD.COM in FILE:/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_1y0QJ8 (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [ldap_child_get_tgt_sync] (0x2000): credentials stored (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [ldap_child_get_tgt_sync] (0x2000): Got KDC time offset (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [ldap_child_get_tgt_sync] (0x2000): Renaming [/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_1y0QJ8] to [/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM] (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [unique_filename_destructor] (0x2000): Unlinking [/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_1y0QJ8] (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [unlink_dbg] (0x2000): File already removed: [/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_1y0QJ8] (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [prepare_response] (0x0400): Building response for result [0] (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [pack_buffer] (0x2000): response size: 65 (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [pack_buffer] (0x1000): result [0] krberr [0] msgsize [45] msg [FILE:/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM] (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25621]]]] [main] (0x0400): ldap_child completed successfully (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [main] (0x0400): ldap_child started. (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [main] (0x2000): context initialized (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [unpack_buffer] (0x1000): total buffer size: 57 (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [unpack_buffer] (0x1000): realm_str size: 17 (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [unpack_buffer] (0x1000): got realm_str: CHILD1.SSSDAD.COM (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [unpack_buffer] (0x1000): princ_str size: 16 (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [unpack_buffer] (0x1000): got princ_str: BKR-HV03-GUEST1$ (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [unpack_buffer] (0x1000): keytab_name size: 0 (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [unpack_buffer] (0x1000): lifetime: 86400 (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [unpack_buffer] (0x0200): Will run as [0][0]. (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [privileged_krb5_setup] (0x2000): Kerberos context initialized (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [main] (0x2000): Kerberos context initialized (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [become_user] (0x0200): Trying to become user [0][0]. (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [become_user] (0x0200): Already user [0]. (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [main] (0x2000): Running as [0][0]. (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [main] (0x2000): getting TGT sync (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [ldap_child_get_tgt_sync] (0x2000): got realm_name: [CHILD1.SSSDAD.COM] (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [ldap_child_get_tgt_sync] (0x0100): Principal name is: [BKR-HV03-GUEST1$@CHILD1.SSSDAD.COM] (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [ldap_child_get_tgt_sync] (0x0100): Using keytab [MEMORY:/etc/krb5.keytab] (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478213.971848: Getting initial credentials for BKR-HV03-GUEST1$@CHILD1.SSSDAD.COM (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478213.971849: Looked up etypes in keytab: aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac, des, des-cbc-crc, des-cbc-crc (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478213.971851: Sending request (213 bytes) to CHILD1.SSSDAD.COM (Tue Dec 5 07:50:13 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478213.971852: Sending initial UDP request to dgram 10.8.63.35:88 (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15778: Received answer (232 bytes) from dgram 10.8.63.35:88 (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15779: Response was from master KDC (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15780: Received error from KDC: -1765328359/Additional pre-authentication required (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15783: Processing preauth types: 16, 15, 19, 2 (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15784: Selected etype info: etype aes256-cts, salt "CHILD1.SSSDAD.COMhostbkr-hv03-guest1.child1.sssdad.com", params "" (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15785: Retrieving BKR-HV03-GUEST1$@CHILD1.SSSDAD.COM from MEMORY:/etc/krb5.keytab (vno 0, enctype aes256-cts) with result: 0/Success (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15786: AS key obtained for encrypted timestamp: aes256-cts/381E (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15788: Encrypted timestamp (for 1512478213.979443): plain 301AA011180F32303137313230353132353031335AA10502030EF1F3, encrypted 347C2998F4FC88E654FEFD0B892A4D60907B238FD755C6760DD079EC02BDD031EADC92DA7FAEC09961E1B312B35F188BCBB66DB92B55B11E (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15789: Preauth module encrypted_timestamp (2) (real) returned: 0/Success (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15790: Produced preauth for next request: 2 (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15791: Sending request (293 bytes) to CHILD1.SSSDAD.COM (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15792: Sending initial UDP request to dgram 10.8.63.35:88 (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15793: Received answer (105 bytes) from dgram 10.8.63.35:88 (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15794: Response was from master KDC (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15795: Received error from KDC: -1765328332/Response too big for UDP, retry with TCP (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15796: Request or response is too big for UDP; retrying with TCP (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15797: Sending request (293 bytes) to CHILD1.SSSDAD.COM (tcp only) (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15798: Initiating TCP connection to stream 10.8.63.35:88 (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15799: Sending TCP request to stream 10.8.63.35:88 (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15800: Received answer (1578 bytes) from stream 10.8.63.35:88 (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15801: Terminating TCP connection to stream 10.8.63.35:88 (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15802: Response was from master KDC (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15803: Processing preauth types: 19 (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15804: Selected etype info: etype aes256-cts, salt "CHILD1.SSSDAD.COMhostbkr-hv03-guest1.child1.sssdad.com", params "" (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15805: Produced preauth for next request: (empty) (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15806: AS key determined by preauth: aes256-cts/381E (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15807: Decrypted AS reply; session key is: aes256-cts/DE11 (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15808: FAST negotiation: unavailable (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [ldap_child_get_tgt_sync] (0x2000): credentials initialized (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [ldap_child_get_tgt_sync] (0x2000): keytab ccname: [FILE:/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_FWNWPa] (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15809: Initializing FILE:/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_FWNWPa with default princ BKR-HV03-GUEST1$@CHILD1.SSSDAD.COM (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [sss_child_krb5_trace_cb] (0x4000): [25626] 1512478214.15810: Storing BKR-HV03-GUEST1$@CHILD1.SSSDAD.COM -> krbtgt/CHILD1.SSSDAD.COM@CHILD1.SSSDAD.COM in FILE:/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_FWNWPa (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [ldap_child_get_tgt_sync] (0x2000): credentials stored (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [ldap_child_get_tgt_sync] (0x2000): Got KDC time offset (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [ldap_child_get_tgt_sync] (0x2000): Renaming [/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_FWNWPa] to [/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM] (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [unique_filename_destructor] (0x2000): Unlinking [/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_FWNWPa] (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [unlink_dbg] (0x2000): File already removed: [/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM_FWNWPa] (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [prepare_response] (0x0400): Building response for result [0] (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [pack_buffer] (0x2000): response size: 65 (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [pack_buffer] (0x1000): result [0] krberr [0] msgsize [45] msg [FILE:/var/lib/sss/db/ccache_CHILD1.SSSDAD.COM] (Tue Dec 5 07:50:14 2017) [[sssd[ldap_child[25626]]]] [main] (0x0400): ldap_child completed successfully