(2021-11-18 13:12:50): [krb5_child[4185]] [main] (0x0400): krb5_child started. (2021-11-18 13:12:50): [krb5_child[4185]] [unpack_buffer] (0x1000): total buffer size: [99] (2021-11-18 13:12:50): [krb5_child[4185]] [unpack_buffer] (0x0100): cmd [241 (auth)] uid [285279201] gid [285200513] validate [true] enterprise principal [true] offline [false] UPN [aron.kelemen@ourlab.se] (2021-11-18 13:12:50): [krb5_child[4185]] [unpack_buffer] (0x2000): No old ccache (2021-11-18 13:12:50): [krb5_child[4185]] [unpack_buffer] (0x0100): ccname: [KCM:] old_ccname: [not set] keytab: [not set] (2021-11-18 13:12:50): [krb5_child[4185]] [check_keytab_name] (0x0400): Missing krb5_keytab option for domain, looking for default one (2021-11-18 13:12:50): [krb5_child[4185]] [check_keytab_name] (0x0400): krb5_kt_default_name() returned: FILE:/etc/krb5.keytab (2021-11-18 13:12:50): [krb5_child[4185]] [check_keytab_name] (0x0400): krb5_child will default to: /etc/krb5.keytab (2021-11-18 13:12:50): [krb5_child[4185]] [check_use_fast] (0x0100): Not using FAST. (2021-11-18 13:12:50): [krb5_child[4185]] [k5c_precreate_ccache] (0x4000): Recreating ccache (2021-11-18 13:12:50): [krb5_child[4185]] [privileged_krb5_setup] (0x0080): Cannot open the PAC responder socket (2021-11-18 13:12:50): [krb5_child[4185]] [become_user] (0x0200): Trying to become user [285279201][285200513]. (2021-11-18 13:12:50): [krb5_child[4185]] [main] (0x2000): Running as [285279201][285200513]. (2021-11-18 13:12:50): [krb5_child[4185]] [set_lifetime_options] (0x0100): No specific renewable lifetime requested. (2021-11-18 13:12:50): [krb5_child[4185]] [set_lifetime_options] (0x0100): No specific lifetime requested. (2021-11-18 13:12:50): [krb5_child[4185]] [set_canonicalize_option] (0x0100): Canonicalization is set to [true] (2021-11-18 13:12:50): [krb5_child[4185]] [main] (0x0400): Will perform auth (2021-11-18 13:12:50): [krb5_child[4185]] [main] (0x0400): Will perform online auth (2021-11-18 13:12:50): [krb5_child[4185]] [tgt_req_child] (0x1000): Attempting to get a TGT (2021-11-18 13:12:50): [krb5_child[4185]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [ourlab.se] (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408506: Getting initial credentials for aron.kelemen\@ourlab.se@ourlab.se (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408508: Sending unauthenticated request (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408509: Sending request (221 bytes) to ourlab.se (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408510: Initiating TCP connection to stream 172.17.105.29:88 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408511: Sending TCP request to stream 172.17.105.29:88 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408512: Received answer (197 bytes) from stream 172.17.105.29:88 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408513: Terminating TCP connection to stream 172.17.105.29:88 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408514: Response was from master KDC (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408515: Received error from KDC: -1765328359/Additional pre-authentication required (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408518: Preauthenticating using KDC method data (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408519: Processing preauth types: PA-PK-AS-REQ (16), PA-PK-AS-REP_OLD (15), PA-ETYPE-INFO2 (19), PA-ENC-TIMESTAMP (2) (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408520: Selected etype info: etype aes256-cts, salt "ourlab.searon.kelemenszabo", params "" (2021-11-18 13:12:50): [krb5_child[4185]] [sss_krb5_responder] (0x4000): Got question [password]. (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408521: AS key obtained for encrypted timestamp: aes256-cts/3740 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408523: Encrypted timestamp (for 1637237570.977890): plain 301AA011180F32303231313131383132313235305AA10502030EEBE2, encrypted 78D99AFBC72AACEA5765393BD3E12B1251AA714E466F92D091DC1B3FCE9D10251D63C2DB59F10FBC639523B91F99BB1D1A0A9832305B95E0 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408524: Preauth module encrypted_timestamp (2) (real) returned: 0/Success (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408525: Produced preauth for next request: PA-ENC-TIMESTAMP (2) (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408526: Sending request (301 bytes) to ourlab.se (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408527: Initiating TCP connection to stream 172.17.105.29:88 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408528: Sending TCP request to stream 172.17.105.29:88 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408529: Received answer (1664 bytes) from stream 172.17.105.29:88 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408530: Terminating TCP connection to stream 172.17.105.29:88 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408531: Response was from master KDC (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408532: Processing preauth types: PA-ETYPE-INFO2 (19) (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408533: Selected etype info: etype aes256-cts, salt "ourlab.searon.kelemenszabo", params "" (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408534: Produced preauth for next request: (empty) (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408535: AS key determined by preauth: aes256-cts/3740 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408536: Decrypted AS reply; session key is: aes256-cts/56F3 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408537: FAST negotiation: unavailable (2021-11-18 13:12:50): [krb5_child[4185]] [sss_krb5_expire_callback_func] (0x2000): exp_time: [3608749] (2021-11-18 13:12:50): [krb5_child[4185]] [validate_tgt] (0x2000): Found keytab entry with the realm of the credential. (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408538: Retrieving TEST0003$@ourlab.se from MEMORY:/etc/krb5.keytab (vno 0, enctype 0) with result: 0/Success (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408539: Resolving unique ccache of type MEMORY (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408540: Initializing MEMORY:CF6O1NQ with default princ kelaro@ourlab.se (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408541: Storing kelaro@ourlab.se -> krbtgt/ourlab.se@ourlab.se in MEMORY:CF6O1NQ (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408542: Getting credentials kelaro@ourlab.se -> TEST0003$@ourlab.se using ccache MEMORY:CF6O1NQ (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408543: Retrieving kelaro@ourlab.se -> TEST0003$@ourlab.se from MEMORY:CF6O1NQ with result: -1765328243/Matching credential not found (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408544: Retrieving kelaro@ourlab.se -> krbtgt/ourlab.se@ourlab.se from MEMORY:CF6O1NQ with result: 0/Success (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408545: Starting with TGT for client realm: kelaro@ourlab.se -> krbtgt/ourlab.se@ourlab.se (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408546: Requesting tickets for TEST0003$@ourlab.se, referrals on (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408547: Generated subkey for TGS request: aes256-cts/B8BE (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408548: etypes requested in TGS request: aes256-cts, aes256-sha2, camellia256-cts, aes128-cts, aes128-sha2, camellia128-cts, rc4-hmac (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408550: Encoding request body and padata into FAST request (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408551: Sending request (1772 bytes) to ourlab.se (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408552: Initiating TCP connection to stream 172.17.105.29:88 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408553: Sending TCP request to stream 172.17.105.29:88 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408554: Received answer (1836 bytes) from stream 172.17.105.29:88 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408555: Terminating TCP connection to stream 172.17.105.29:88 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408556: Response was from master KDC (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408557: Decoding FAST response (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408558: FAST reply key: aes256-cts/79E0 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408559: TGS reply is for kelaro@ourlab.se -> TEST0003$@ourlab.se with session key aes256-cts/4A53 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408560: TGS request result: 0/Success (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408561: Received creds for desired service TEST0003$@ourlab.se (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408562: Storing kelaro@ourlab.se -> TEST0003$@ourlab.se in MEMORY:CF6O1NQ (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408563: Creating authenticator for kelaro@ourlab.se -> TEST0003$@ourlab.se, seqnum 0, subkey (null), session key aes256-cts/4A53 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408565: Retrieving TEST0003$@ourlab.se from MEMORY:/etc/krb5.keytab (vno 2, enctype aes256-cts) with result: 0/Success (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408566: Decrypted AP-REQ with specified server principal TEST0003$@ourlab.se: aes256-cts/CA92 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408567: AP-REQ ticket: kelaro@ourlab.se -> TEST0003$@ourlab.se, session key aes256-cts/4A53 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408568: Negotiated enctype based on authenticator: aes256-cts (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408569: Initializing MEMORY:rd_req2 with default princ kelaro@ourlab.se (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408570: Storing kelaro@ourlab.se -> TEST0003$@ourlab.se in MEMORY:rd_req2 (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408571: Destroying ccache MEMORY:CF6O1NQ (2021-11-18 13:12:50): [krb5_child[4185]] [validate_tgt] (0x0400): TGT verified using key for [TEST0003$@ourlab.se]. (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408572: Retrieving kelaro@ourlab.se -> TEST0003$@ourlab.se from MEMORY:rd_req2 with result: 0/Success (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408573: Retrieving TEST0003$@ourlab.se from MEMORY:/etc/krb5.keytab (vno 2, enctype aes256-cts) with result: 0/Success (2021-11-18 13:12:50): [krb5_child[4185]] [sss_send_pac] (0x0080): failed to contact PAC responder (2021-11-18 13:12:50): [krb5_child[4185]] [validate_tgt] (0x0040): sss_send_pac failed, group membership for user with principal [aron.kelemen\@ourlab.se@ourlab.se] might not be correct. (2021-11-18 13:12:50): [krb5_child[4185]] [sss_child_krb5_trace_cb] (0x4000): [4185] 1637237570.408574: Destroying ccache MEMORY:rd_req2 (2021-11-18 13:12:50): [krb5_child[4185]] [get_and_save_tgt] (0x2000): Running as [285279201][285200513]. (2021-11-18 13:12:50): [krb5_child[4185]] [sss_get_ccache_name_for_principal] (0x4000): Location: [KCM:] (2021-11-18 13:12:50): [krb5_child[4185]] [sss_get_ccache_name_for_principal] (0x2000): krb5_cc_cache_match failed: [111][Connection refused] (2021-11-18 13:12:50): [krb5_child[4185]] [create_ccache] (0x0020): 1000: [111][Connection refused] (2021-11-18 13:12:50): [krb5_child[4185]] [map_krb5_error] (0x0020): 1853: [111][Connection refused] (2021-11-18 13:12:50): [krb5_child[4185]] [k5c_send_data] (0x0200): Received error code 1432158209 (2021-11-18 13:12:50): [krb5_child[4185]] [pack_response_packet] (0x2000): response packet size: [20] (2021-11-18 13:12:50): [krb5_child[4185]] [k5c_send_data] (0x4000): Response sent. (2021-11-18 13:12:50): [krb5_child[4185]] [main] (0x0400): krb5_child completed successfully