(Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [main] (0x0400): krb5_child started. (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [unpack_buffer] (0x1000): total buffer size: [91] (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [unpack_buffer] (0x0100): cmd [249] uid [369000001] gid [369000001] validate [true] enterprise principal [false] offline [false] UPN [remko@PHASMA.NL] (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [unpack_buffer] (0x2000): No old ccache (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [unpack_buffer] (0x0100): ccname: [KCM:] old_ccname: [not set] keytab: [/etc/krb5.keytab] (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [k5c_setup_fast] (0x0100): Fast principal is set to [host/carbon.phasma.nl@PHASMA.NL] (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [find_principal_in_keytab] (0x4000): Trying to find principal host/carbon.phasma.nl@PHASMA.NL in keytab. (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [match_principal] (0x1000): Principal matched to the sample (host/carbon.phasma.nl@PHASMA.NL). (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [get_tgt_times] (0x1000): FAST ccache must be recreated (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11305]]]] [become_user] (0x0200): Trying to become user [0][0]. (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11305]]]] [become_user] (0x0200): Already user [0]. (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11305]]]] [check_fast_ccache] (0x2000): Running as [0][0]. (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11305]]]] [set_canonicalize_option] (0x0100): Canonicalization is set to [true] (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11305]]]] [create_ccache] (0x4000): Initializing ccache of type [FILE] (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11305]]]] [create_ccache] (0x4000): returning: 0 (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [check_fast_ccache] (0x0200): FAST TGT was successfully recreated! (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [become_user] (0x0200): Trying to become user [369000001][369000001]. (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [main] (0x2000): Running as [369000001][369000001]. (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [k5c_setup] (0x2000): Running as [369000001][369000001]. (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [set_lifetime_options] (0x0100): No specific renewable lifetime requested. (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [set_lifetime_options] (0x0100): No specific lifetime requested. (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [set_canonicalize_option] (0x0100): Canonicalization is set to [true] (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [main] (0x0400): Will perform pre-auth (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [tgt_req_child] (0x1000): Attempting to get a TGT (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [PHASMA.NL] (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309398: Getting initial credentials for remko@PHASMA.NL (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309399: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_PHASMA.NL (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309400: Retrieving host/carbon.phasma.nl@PHASMA.NL -> krb5_ccache_conf_data/fast_avail/krbtgt\/PHASMA.NL\@PHASMA.NL@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_PHASMA.NL with result: -1765328243/Matching credential not found (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309402: Sending request (167 bytes) to PHASMA.NL (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309403: Initiating TCP connection to stream 192.168.136.8:88 (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309404: Sending TCP request to stream 192.168.136.8:88 (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309405: Received answer (246 bytes) from stream 192.168.136.8:88 (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309406: Terminating TCP connection to stream 192.168.136.8:88 (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309407: Response was from master KDC (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309408: Received error from KDC: -1765328359/Additional pre-authentication required (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309409: Upgrading to FAST due to presence of PA_FX_FAST in reply (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309410: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_PHASMA.NL (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309411: Retrieving host/carbon.phasma.nl@PHASMA.NL -> krb5_ccache_conf_data/fast_avail/krbtgt\/PHASMA.NL\@PHASMA.NL@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_PHASMA.NL with result: -1765328243/Matching credential not found (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309412: Getting credentials host/carbon.phasma.nl@PHASMA.NL -> krbtgt/PHASMA.NL@PHASMA.NL using ccache MEMORY:/var/lib/sss/db/fast_ccache_PHASMA.NL (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309413: Retrieving host/carbon.phasma.nl@PHASMA.NL -> krbtgt/PHASMA.NL@PHASMA.NL from MEMORY:/var/lib/sss/db/fast_ccache_PHASMA.NL with result: 0/Success (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309414: Armor ccache sesion key: aes256-cts/ADB4 (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309416: Creating authenticator for host/carbon.phasma.nl@PHASMA.NL -> krbtgt/PHASMA.NL@PHASMA.NL, seqnum 0, subkey aes256-cts/6645, session key aes256-cts/ADB4 (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309418: FAST armor key: aes256-cts/43A0 (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309420: Encoding request body and padata into FAST request (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309421: Sending request (980 bytes) to PHASMA.NL (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309422: Initiating TCP connection to stream 192.168.136.8:88 (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309423: Sending TCP request to stream 192.168.136.8:88 (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309424: Received answer (527 bytes) from stream 192.168.136.8:88 (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309425: Terminating TCP connection to stream 192.168.136.8:88 (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309426: Response was from master KDC (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309427: Received error from KDC: -1765328359/Additional pre-authentication required (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309428: Decoding FAST response (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309431: Processing preauth types: 136, 19, 138, 133, 137 (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309432: Selected etype info: etype aes256-cts, salt "ipf[y!NJ(8CgDj4*", params "" (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309433: Received cookie: MIT (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_krb5_responder] (0x4000): Got question [password]. (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_krb5_prompter] (0x4000): sss_krb5_prompter name [(null)] banner [(null)] num_prompts [1] EINVAL. (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_krb5_prompter] (0x4000): Prompt [0][Password for remko@PHASMA.NL]. (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_krb5_prompter] (0x0020): Cannot handle password prompts. (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [sss_child_krb5_trace_cb] (0x4000): [11304] 1511972113.309434: Preauth module encrypted_challenge (138) (real) returned: -1765328254/Cannot read password (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [get_and_save_tgt] (0x0400): krb5_get_init_creds_password returned [-1765328174] during pre-auth. (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [k5c_send_data] (0x0200): Received error code 0 (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [pack_response_packet] (0x2000): response packet size: [12] (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [k5c_send_data] (0x4000): Response sent. (Wed Nov 29 17:15:13 2017) [[sssd[krb5_child[11304]]]] [main] (0x0400): krb5_child completed successfully (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [main] (0x0400): krb5_child started. (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [unpack_buffer] (0x1000): total buffer size: [103] (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [unpack_buffer] (0x0100): cmd [241] uid [369000001] gid [369000001] validate [true] enterprise principal [false] offline [false] UPN [remko@PHASMA.NL] (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [unpack_buffer] (0x0100): ccname: [KCM:] old_ccname: [KCM:] keytab: [/etc/krb5.keytab] (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [switch_creds] (0x0200): Switch user to [369000001][369000001]. (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [switch_creds] (0x0200): Switch user to [0][0]. (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [k5c_check_old_ccache] (0x4000): Ccache_file is [KCM:] and is not active and TGT is valid. (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [k5c_precreate_ccache] (0x4000): Recreating ccache (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [k5c_setup_fast] (0x0100): Fast principal is set to [host/carbon.phasma.nl@PHASMA.NL] (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [find_principal_in_keytab] (0x4000): Trying to find principal host/carbon.phasma.nl@PHASMA.NL in keytab. (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [match_principal] (0x1000): Principal matched to the sample (host/carbon.phasma.nl@PHASMA.NL). (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [check_fast_ccache] (0x0200): FAST TGT is still valid. (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [become_user] (0x0200): Trying to become user [369000001][369000001]. (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [main] (0x2000): Running as [369000001][369000001]. (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [k5c_setup] (0x2000): Running as [369000001][369000001]. (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [set_lifetime_options] (0x0100): No specific renewable lifetime requested. (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [set_lifetime_options] (0x0100): No specific lifetime requested. (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [set_canonicalize_option] (0x0100): Canonicalization is set to [true] (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [main] (0x0400): Will perform online auth (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [tgt_req_child] (0x1000): Attempting to get a TGT (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [PHASMA.NL] (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47071: Getting initial credentials for remko@PHASMA.NL (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47072: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_PHASMA.NL (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47073: Retrieving host/carbon.phasma.nl@PHASMA.NL -> krb5_ccache_conf_data/fast_avail/krbtgt\/PHASMA.NL\@PHASMA.NL@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_PHASMA.NL with result: -1765328243/Matching credential not found (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47075: Sending request (167 bytes) to PHASMA.NL (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47076: Initiating TCP connection to stream 192.168.136.8:88 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47077: Sending TCP request to stream 192.168.136.8:88 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47078: Received answer (246 bytes) from stream 192.168.136.8:88 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47079: Terminating TCP connection to stream 192.168.136.8:88 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47080: Response was from master KDC (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47081: Received error from KDC: -1765328359/Additional pre-authentication required (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47082: Upgrading to FAST due to presence of PA_FX_FAST in reply (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47083: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_PHASMA.NL (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47084: Retrieving host/carbon.phasma.nl@PHASMA.NL -> krb5_ccache_conf_data/fast_avail/krbtgt\/PHASMA.NL\@PHASMA.NL@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_PHASMA.NL with result: -1765328243/Matching credential not found (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47085: Getting credentials host/carbon.phasma.nl@PHASMA.NL -> krbtgt/PHASMA.NL@PHASMA.NL using ccache MEMORY:/var/lib/sss/db/fast_ccache_PHASMA.NL (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47086: Retrieving host/carbon.phasma.nl@PHASMA.NL -> krbtgt/PHASMA.NL@PHASMA.NL from MEMORY:/var/lib/sss/db/fast_ccache_PHASMA.NL with result: 0/Success (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47087: Armor ccache sesion key: aes256-cts/ADB4 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47089: Creating authenticator for host/carbon.phasma.nl@PHASMA.NL -> krbtgt/PHASMA.NL@PHASMA.NL, seqnum 0, subkey aes256-cts/E017, session key aes256-cts/ADB4 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47091: FAST armor key: aes256-cts/3CBD (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47093: Encoding request body and padata into FAST request (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47094: Sending request (980 bytes) to PHASMA.NL (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47095: Initiating TCP connection to stream 192.168.136.8:88 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47096: Sending TCP request to stream 192.168.136.8:88 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47097: Received answer (527 bytes) from stream 192.168.136.8:88 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47098: Terminating TCP connection to stream 192.168.136.8:88 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47099: Response was from master KDC (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47100: Received error from KDC: -1765328359/Additional pre-authentication required (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47101: Decoding FAST response (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47104: Processing preauth types: 136, 19, 138, 133, 137 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47105: Selected etype info: etype aes256-cts, salt "ipf[y!NJ(8CgDj4*", params "" (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47106: Received cookie: MIT (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_krb5_responder] (0x4000): Got question [password]. (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47108: Preauth module encrypted_challenge (138) (real) returned: 0/Success (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47109: Produced preauth for next request: 133, 138 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47110: Encoding request body and padata into FAST request (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47111: Sending request (1078 bytes) to PHASMA.NL (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47112: Initiating TCP connection to stream 192.168.136.8:88 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47113: Sending TCP request to stream 192.168.136.8:88 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47114: Received answer (1019 bytes) from stream 192.168.136.8:88 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47115: Terminating TCP connection to stream 192.168.136.8:88 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47116: Response was from master KDC (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47117: Decoding FAST response (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47118: Processing preauth types: 19, 138 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47119: Selected etype info: etype aes256-cts, salt "ipf[y!NJ(8CgDj4*", params "" (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47120: Preauth module encrypted_challenge (138) (real) returned: 0/Success (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47121: Produced preauth for next request: (empty) (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47122: AS key determined by preauth: aes256-cts/29F3 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47123: FAST reply key: aes256-cts/1F7F (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47124: Decrypted AS reply; session key is: aes256-cts/8C60 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47125: FAST negotiation: available (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_krb5_expire_callback_func] (0x2000): exp_time: [633944684] (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [validate_tgt] (0x2000): Found keytab entry with the realm of the credential. (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47126: Retrieving host/carbon.phasma.nl@PHASMA.NL from MEMORY:/etc/krb5.keytab (vno 0, enctype 0) with result: 0/Success (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47127: Resolving unique ccache of type MEMORY (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47128: Initializing MEMORY:ewcXp2w with default princ remko@PHASMA.NL (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47129: Storing remko@PHASMA.NL -> krbtgt/PHASMA.NL@PHASMA.NL in MEMORY:ewcXp2w (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47130: Getting credentials remko@PHASMA.NL -> host/carbon.phasma.nl@PHASMA.NL using ccache MEMORY:ewcXp2w (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47131: Retrieving remko@PHASMA.NL -> host/carbon.phasma.nl@PHASMA.NL from MEMORY:ewcXp2w with result: -1765328243/Matching credential not found (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47132: Retrieving remko@PHASMA.NL -> krbtgt/PHASMA.NL@PHASMA.NL from MEMORY:ewcXp2w with result: 0/Success (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47133: Starting with TGT for client realm: remko@PHASMA.NL -> krbtgt/PHASMA.NL@PHASMA.NL (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47134: Requesting tickets for host/carbon.phasma.nl@PHASMA.NL, referrals on (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47135: Generated subkey for TGS request: aes256-cts/63FA (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47136: etypes requested in TGS request: aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47138: Encoding request body and padata into FAST request (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47139: Sending request (915 bytes) to PHASMA.NL (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47140: Initiating TCP connection to stream 192.168.136.8:88 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47141: Sending TCP request to stream 192.168.136.8:88 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47142: Received answer (824 bytes) from stream 192.168.136.8:88 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47143: Terminating TCP connection to stream 192.168.136.8:88 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47144: Response was from master KDC (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47145: Decoding FAST response (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47146: FAST reply key: aes256-cts/0ADE (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47147: TGS reply is for remko@PHASMA.NL -> host/carbon.phasma.nl@PHASMA.NL with session key aes256-cts/671B (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47148: TGS request result: 0/Success (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47149: Received creds for desired service host/carbon.phasma.nl@PHASMA.NL (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47150: Storing remko@PHASMA.NL -> host/carbon.phasma.nl@PHASMA.NL in MEMORY:ewcXp2w (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47151: Creating authenticator for remko@PHASMA.NL -> host/carbon.phasma.nl@PHASMA.NL, seqnum 0, subkey (null), session key aes256-cts/671B (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47153: Retrieving host/carbon.phasma.nl@PHASMA.NL from MEMORY:/etc/krb5.keytab (vno 1, enctype aes256-cts) with result: 0/Success (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47154: Decrypted AP-REQ with specified server principal host/carbon.phasma.nl@PHASMA.NL: aes256-cts/42A0 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47155: AP-REQ ticket: remko@PHASMA.NL -> host/carbon.phasma.nl@PHASMA.NL, session key aes256-cts/671B (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47156: Negotiated enctype based on authenticator: aes256-cts (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47157: Initializing MEMORY:rd_req2 with default princ remko@PHASMA.NL (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47158: Storing remko@PHASMA.NL -> host/carbon.phasma.nl@PHASMA.NL in MEMORY:rd_req2 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47159: Destroying ccache MEMORY:ewcXp2w (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [validate_tgt] (0x0400): TGT verified using key for [host/carbon.phasma.nl@PHASMA.NL]. (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_child_krb5_trace_cb] (0x4000): [11306] 1511972116.47160: Destroying ccache MEMORY:rd_req2 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_get_ccache_name_for_principal] (0x4000): Location: [KCM:] (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [sss_get_ccache_name_for_principal] (0x4000): tmp_ccname: [KCM:369000001:2603] (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [create_ccache] (0x4000): Initializing ccache of type [KCM] (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [create_ccache] (0x4000): CC supports switch (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [create_ccache] (0x4000): returning: 0 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [safe_remove_old_ccache_file] (0x0400): New and old ccache file are the same, none will be deleted. (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [k5c_send_data] (0x0200): Received error code 0 (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [pack_response_packet] (0x2000): response packet size: [108] (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [k5c_send_data] (0x4000): Response sent. (Wed Nov 29 17:15:16 2017) [[sssd[krb5_child[11306]]]] [main] (0x0400): krb5_child completed successfully (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [main] (0x0400): krb5_child started. (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [unpack_buffer] (0x1000): total buffer size: [95] (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [unpack_buffer] (0x0100): cmd [249] uid [369000001] gid [369000001] validate [true] enterprise principal [false] offline [false] UPN [remko@PHASMA.NL] (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [unpack_buffer] (0x0100): ccname: [KCM:] old_ccname: [KCM:] keytab: [/etc/krb5.keytab] (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [k5c_setup_fast] (0x0100): Fast principal is set to [host/carbon.phasma.nl@PHASMA.NL] (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [find_principal_in_keytab] (0x4000): Trying to find principal host/carbon.phasma.nl@PHASMA.NL in keytab. (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [match_principal] (0x1000): Principal matched to the sample (host/carbon.phasma.nl@PHASMA.NL). (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [check_fast_ccache] (0x0200): FAST TGT is still valid. (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [become_user] (0x0200): Trying to become user [369000001][369000001]. (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [main] (0x2000): Running as [369000001][369000001]. (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [k5c_setup] (0x2000): Running as [369000001][369000001]. (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [set_lifetime_options] (0x0100): No specific renewable lifetime requested. (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [set_lifetime_options] (0x0100): No specific lifetime requested. (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [set_canonicalize_option] (0x0100): Canonicalization is set to [true] (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [main] (0x0400): Will perform pre-auth (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [tgt_req_child] (0x1000): Attempting to get a TGT (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [PHASMA.NL] (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229865: Getting initial credentials for remko@PHASMA.NL (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229866: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_PHASMA.NL (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229867: Retrieving host/carbon.phasma.nl@PHASMA.NL -> krb5_ccache_conf_data/fast_avail/krbtgt\/PHASMA.NL\@PHASMA.NL@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_PHASMA.NL with result: -1765328243/Matching credential not found (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229869: Sending request (167 bytes) to PHASMA.NL (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229870: Initiating TCP connection to stream 192.168.136.8:88 (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229871: Sending TCP request to stream 192.168.136.8:88 (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229872: Received answer (246 bytes) from stream 192.168.136.8:88 (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229873: Terminating TCP connection to stream 192.168.136.8:88 (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229874: Response was from master KDC (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229875: Received error from KDC: -1765328359/Additional pre-authentication required (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229876: Upgrading to FAST due to presence of PA_FX_FAST in reply (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229877: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_PHASMA.NL (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229878: Retrieving host/carbon.phasma.nl@PHASMA.NL -> krb5_ccache_conf_data/fast_avail/krbtgt\/PHASMA.NL\@PHASMA.NL@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_PHASMA.NL with result: -1765328243/Matching credential not found (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229879: Getting credentials host/carbon.phasma.nl@PHASMA.NL -> krbtgt/PHASMA.NL@PHASMA.NL using ccache MEMORY:/var/lib/sss/db/fast_ccache_PHASMA.NL (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229880: Retrieving host/carbon.phasma.nl@PHASMA.NL -> krbtgt/PHASMA.NL@PHASMA.NL from MEMORY:/var/lib/sss/db/fast_ccache_PHASMA.NL with result: 0/Success (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229881: Armor ccache sesion key: aes256-cts/ADB4 (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229883: Creating authenticator for host/carbon.phasma.nl@PHASMA.NL -> krbtgt/PHASMA.NL@PHASMA.NL, seqnum 0, subkey aes256-cts/108C, session key aes256-cts/ADB4 (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229885: FAST armor key: aes256-cts/A654 (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229887: Encoding request body and padata into FAST request (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229888: Sending request (980 bytes) to PHASMA.NL (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229889: Initiating TCP connection to stream 192.168.136.8:88 (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229890: Sending TCP request to stream 192.168.136.8:88 (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229891: Received answer (527 bytes) from stream 192.168.136.8:88 (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229892: Terminating TCP connection to stream 192.168.136.8:88 (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229893: Response was from master KDC (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229894: Received error from KDC: -1765328359/Additional pre-authentication required (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229895: Decoding FAST response (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229898: Processing preauth types: 136, 19, 138, 133, 137 (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229899: Selected etype info: etype aes256-cts, salt "ipf[y!NJ(8CgDj4*", params "" (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229900: Received cookie: MIT (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_krb5_responder] (0x4000): Got question [password]. (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_krb5_prompter] (0x4000): sss_krb5_prompter name [(null)] banner [(null)] num_prompts [1] EINVAL. (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_krb5_prompter] (0x4000): Prompt [0][Password for remko@PHASMA.NL]. (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_krb5_prompter] (0x0020): Cannot handle password prompts. (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [sss_child_krb5_trace_cb] (0x4000): [11311] 1511972118.229901: Preauth module encrypted_challenge (138) (real) returned: -1765328254/Cannot read password (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [get_and_save_tgt] (0x0400): krb5_get_init_creds_password returned [-1765328174] during pre-auth. (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [k5c_send_data] (0x0200): Received error code 0 (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [pack_response_packet] (0x2000): response packet size: [12] (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [k5c_send_data] (0x4000): Response sent. (Wed Nov 29 17:15:18 2017) [[sssd[krb5_child[11311]]]] [main] (0x0400): krb5_child completed successfully