(Wed Nov 9 14:53:42 2016) [[sssd[krb5_child[3626]]]] [sss_child_krb5_trace_cb] (0x4000): [3626] 1478699622.856605: Retrieving longina@N.C.DOMAIN -> host/lnx-adm557.adm.c.sdu.d k@A.C.DOMAIN from MEMORY:rd_req2 with result: 0/Success (Wed Nov 9 14:53:42 2016) [[sssd[krb5_child[3626]]]] [sss_child_krb5_trace_cb] (0x4000): [3626] 1478699622.856694: Retrieving LNX-ADM557$@A.C.DOMAIN from MEMORY:/etc/krb5.keyt ab (vno 6, enctype aes256-cts) with result: 0/Success (Wed Nov 9 14:53:43 2016) [[sssd[krb5_child[3626]]]] [sss_send_pac] (0x0400): PAC responder contacted. It might take a bit of time in case the cache is not up to date. (Wed Nov 9 14:53:43 2016) [[sssd[krb5_child[3626]]]] [sss_child_krb5_trace_cb] (0x4000): [3626] 1478699623.180758: Destroying ccache MEMORY:rd_req2 (Wed Nov 9 14:53:43 2016) [[sssd[krb5_child[3626]]]] [sss_get_ccache_name_for_principal] (0x4000): Location: [FILE:/tmp/krb5cc_332405654_jpHtY9] (Wed Nov 9 14:53:43 2016) [[sssd[krb5_child[3626]]]] [sss_get_ccache_name_for_principal] (0x4000): tmp_ccname: [FILE:/tmp/krb5cc_332405654_jpHtY9] (Wed Nov 9 14:53:43 2016) [[sssd[krb5_child[3626]]]] [create_ccache] (0x4000): Initializing ccache of type [FILE] (Wed Nov 9 14:53:43 2016) [[sssd[krb5_child[3626]]]] [create_ccache] (0x4000): returning: 0 (Wed Nov 9 14:53:43 2016) [[sssd[krb5_child[3626]]]] [safe_remove_old_ccache_file] (0x0400): New and old ccache file are the same, none will be deleted. (Wed Nov 9 14:53:43 2016) [[sssd[krb5_child[3626]]]] [k5c_send_data] (0x0200): Received error code 0 (Wed Nov 9 14:53:43 2016) [[sssd[krb5_child[3626]]]] [pack_response_packet] (0x2000): response packet size: [142] (Wed Nov 9 14:53:43 2016) [[sssd[krb5_child[3626]]]] [k5c_send_data] (0x4000): Response sent. (Wed Nov 9 14:53:43 2016) [[sssd[krb5_child[3626]]]] [main] (0x0400): krb5_child completed successfully (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [main] (0x0400): krb5_child started. (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [unpack_buffer] (0x1000): total buffer size: [166] (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [unpack_buffer] (0x0100): cmd [241] uid [332405654] gid [332405654] validate [true] enterprise principal [false] offline [tr ue] UPN [longina@N.C.DOMAIN] (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [unpack_buffer] (0x0100): ccname: [FILE:/tmp/krb5cc_332405654_XXXXXX] old_ccname: [FILE:/tmp/krb5cc_332405654_jpHtY9] keytab: [/etc/krb5.keytab] (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [old_ccache_valid] (0x0400): Saved ccache FILE:/tmp/krb5cc_332405654_jpHtY9 doesn't exist, ignoring (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [k5c_check_old_ccache] (0x4000): Ccache_file is [FILE:/tmp/krb5cc_332405654_jpHtY9] and is not active and TGT is not valid. (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [k5c_precreate_ccache] (0x4000): Recreating ccache (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [become_user] (0x0200): Trying to become user [332405654][332405654]. (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [main] (0x2000): Running as [332405654][332405654]. (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [become_user] (0x0200): Trying to become user [332405654][332405654]. (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [become_user] (0x0200): Already user [332405654]. (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [k5c_setup] (0x2000): Running as [332405654][332405654]. (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [set_lifetime_options] (0x0100): SSSD_KRB5_RENEWABLE_LIFETIME is set to [7d] (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [set_lifetime_options] (0x0100): SSSD_KRB5_LIFETIME is set to [10h] (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [main] (0x0400): Will perform offline auth (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [create_empty_ccache] (0x1000): Creating empty ccache (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [create_empty_cred] (0x2000): Created empty krb5_creds. (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [create_ccache] (0x4000): Initializing ccache of type [FILE] (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [create_ccache] (0x4000): returning: 0 (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [k5c_send_data] (0x0200): Received error code 0 (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [pack_response_packet] (0x2000): response packet size: [57] (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [k5c_send_data] (0x4000): Response sent. (Wed Nov 9 14:59:19 2016) [[sssd[krb5_child[1249]]]] [main] (0x0400): krb5_child completed successfully (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [main] (0x0400): krb5_child started. (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [unpack_buffer] (0x1000): total buffer size: [166] (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [unpack_buffer] (0x0100): cmd [241] uid [332405654] gid [332405654] validate [true] enterprise principal [true] offline [false] UPN [longina@N.C.DOMAIN] (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [unpack_buffer] (0x0100): ccname: [FILE:/tmp/krb5cc_332405654_XXXXXX] old_ccname: [FILE:/tmp/krb5cc_332405654_6bV4EU] keytab: [/etc/krb5.keytab] (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [switch_creds] (0x0200): Switch user to [332405654][332405654]. (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_krb5_cc_verify_ccache] (0x2000): TGT not found or expired. (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [switch_creds] (0x0200): Switch user to [0][0]. (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [k5c_check_old_ccache] (0x4000): Ccache_file is [FILE:/tmp/krb5cc_332405654_6bV4EU] and is not active and TGT is valid. (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [k5c_precreate_ccache] (0x4000): Recreating ccache (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [find_principal_in_keytab] (0x4000): Trying to find principal (null)@A.C.DOMAIN in keytab. (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [match_principal] (0x1000): Principal matched to the sample ((null)@A.C.DOMAIN). (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [check_fast_ccache] (0x0200): FAST TGT is still valid. (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [become_user] (0x0200): Trying to become user [332405654][332405654]. (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [main] (0x2000): Running as [332405654][332405654]. (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [k5c_setup] (0x2000): Running as [332405654][332405654]. (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [set_lifetime_options] (0x0100): SSSD_KRB5_RENEWABLE_LIFETIME is set to [7d] (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [set_lifetime_options] (0x0100): SSSD_KRB5_LIFETIME is set to [10h] (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [set_canonicalize_option] (0x0100): SSSD_KRB5_CANONICALIZE is set to [true] (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [main] (0x0400): Will perform online auth (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [tgt_req_child] (0x1000): Attempting to get a TGT (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [A.C.DOMAIN] (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.905033: Getting initial credentials for longina\@N.C.DOMAIN@A.C.DOMAIN (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.905075: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_A.C.DOMAIN (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.905098: Retrieving LNX-ADM557$@A.C.DOMAIN -> krb5_ccache_conf_data/fast_avail/krbtgt\/A.C.DOMAIN\@A.C.DOMAIN@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_A.C.DOMAIN with result: -1765328243/Matching credential not found (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.905136: Sending request (201 bytes) to A.C.DOMAIN (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.907753: Resolving hostname adm-vdc0a.a.c.domain. (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.909611: Sending initial UDP request to dgram 10.144.5.5:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.910592: Received answer (112 bytes) from dgram 10.144.5.5:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.911871: Response was not from master KDC (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.911935: Received error from KDC: -1765328316/Realm not local to KDC (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.911943: Following referral to realm N.C.DOMAIN (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.911956: FAST armor ccache: MEMORY:/var/lib/sss/db/fast_ccache_A.C.DOMAIN (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.911976: Retrieving LNX-ADM557$@A.C.DOMAIN -> krb5_ccache_conf_data/fast_avail/krbtgt\/N.C.DOMAIN\@N.C.DOMAIN@X-CACHECONF: from MEMORY:/var/lib/sss/db/fast_ccache_A.C.DOMAIN with result: -1765328243/Matching credential not found (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.912012: Sending request (201 bytes) to N.C.DOMAIN (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.914326: Resolving hostname nat-vdc0c.n.c.domain. (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.915614: Sending initial UDP request to dgram 10.144.5.19:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.918720: Received answer (187 bytes) from dgram 10.144.5.19:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.920243: Response was not from master KDC (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.920304: Received error from KDC: -1765328359/Additional pre-authentication required (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.920334: Processing preauth types: 16, 15, 19, 2 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.920353: Selected etype info: etype aes256-cts, salt "N.C.DOMAINlongina", params "" (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.925709: AS key obtained for encrypted timestamp: aes256-cts/3B25 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.925735: Encrypted timestamp (for 1478700043.712704): plain 301AA011180F32303136313130393134303034335AA10502030AE000, encrypted 4E0B09FC667DD026A805663BB7EF9E43283611CF876A562DDB82C4F10AF0DCD321C27E065E3F1EC2EFE30DEDD6D39F0B0541E0D211B32AC3 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.925746: Preauth module encrypted_timestamp (2) (real) returned: 0/Success (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.925751: Produced preauth for next request: 2 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.925762: Sending request (281 bytes) to N.C.DOMAIN (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.928121: Resolving hostname nat-vdc0a.n.c.domain. (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.929475: Sending initial UDP request to dgram 10.144.5.17:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.932638: Received answer (96 bytes) from dgram 10.144.5.17:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.933904: Response was not from master KDC (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.933966: Received error from KDC: -1765328332/Response too big for UDP, retry with TCP (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.933975: Request or response is too big for UDP; retrying with TCP (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.933982: Sending request (281 bytes) to N.C.DOMAIN (tcp only) (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.935111: Resolving hostname nat-vdc0c.n.c.domain. (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.936380: Initiating TCP connection to stream 10.144.5.19:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.937266: Sending TCP request to stream 10.144.5.19:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.941100: Received answer (8064 bytes) from stream 10.144.5.19:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.941115: Terminating TCP connection to stream 10.144.5.19:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944036: Response was not from master KDC (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944103: Processing preauth types: 19 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944114: Selected etype info: etype aes256-cts, salt "N.C.DOMAINlongina", params "" (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944121: Produced preauth for next request: (empty) (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944129: AS key determined by preauth: aes256-cts/3B25 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944167: Decrypted AS reply; session key is: aes256-cts/7633 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944181: FAST negotiation: unavailable (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_krb5_expire_callback_func] (0x2000): exp_time: [4467853] (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [validate_tgt] (0x2000): Keytab entry with the realm of the credential not found in keytab. Using the last entry. (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944260: Retrieving host/lnx-adm557.a.c.domain@A.C.DOMAIN from MEMORY:/etc/krb5.keytab (vno 0, enctype 0) with result: 0/Success (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944267: Resolving unique ccache of type MEMORY (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944277: Initializing MEMORY:G3xQC8R with default princ longina@N.C.DOMAIN (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944284: Storing longina@N.C.DOMAIN -> krbtgt/N.C.DOMAIN@N.C.DOMAIN in MEMORY:G3xQC8R (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944296: Getting credentials longina@N.C.DOMAIN -> host/lnx-adm557.a.c.domain@A.C.DOMAIN using ccache MEMORY:G3xQC8R (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944313: Retrieving longina@N.C.DOMAIN -> host/lnx-adm557.a.c.domain@A.C.DOMAIN from MEMORY:G3xQC8R with result: -1765328243/Matching credential not found (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944326: Retrieving longina@N.C.DOMAIN -> krbtgt/A.C.DOMAIN@A.C.DOMAIN from MEMORY:G3xQC8R with result: -1765328243/Matching credential not found (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944337: Retrieving longina@N.C.DOMAIN -> krbtgt/N.C.DOMAIN@N.C.DOMAIN from MEMORY:G3xQC8R with result: 0/Success (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944344: Starting with TGT for client realm: longina@N.C.DOMAIN -> krbtgt/N.C.DOMAIN@N.C.DOMAIN (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944358: Retrieving longina@N.C.DOMAIN -> krbtgt/A.C.DOMAIN@A.C.DOMAIN from MEMORY:G3xQC8R with result: -1765328243/Matching credential not found (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944371: Requesting TGT krbtgt/A.C.DOMAIN@N.C.DOMAIN using TGT krbtgt/N.C.DOMAIN@N.C.DOMAIN (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944383: Generated subkey for TGS request: aes256-cts/821E (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944410: etypes requested in TGS request: aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944470: Encoding request body and padata into FAST request (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.944541: Sending request (8198 bytes) to N.C.DOMAIN (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.946749: Resolving hostname nat-vdc0b.n.c.domain. (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.947918: Sending initial UDP request to dgram 10.144.5.18:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.949167: Received answer (96 bytes) from dgram 10.144.5.18:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.950450: Response was not from master KDC (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.950484: Request or response is too big for UDP; retrying with TCP (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.950498: Sending request (8198 bytes) to N.C.DOMAIN (tcp only) (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.951494: Resolving hostname nat-vdc0b.n.c.domain. (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.952741: Initiating TCP connection to stream 10.144.5.18:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.953534: Sending TCP request to stream 10.144.5.18:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.956610: Received answer (8122 bytes) from stream 10.144.5.18:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.956624: Terminating TCP connection to stream 10.144.5.18:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.957579: Response was not from master KDC (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.957607: Decoding FAST response (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.957691: FAST reply key: aes256-cts/9227 Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.957716: TGS reply is for longina@N.C.DOMAIN -> krbtgt/C.DOMAIN@N.C.DOMAIN with session key rc4-hmac/BCD6 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.957749: TGS request result: 0/Success (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.957756: Received TGT for offpath realm C.DOMAIN (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.957762: Requesting TGT krbtgt/A.C.DOMAIN@C.DOMAIN using TGT krbtgt/C.DOMAIN@N.C.DOMAIN (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.957773: Generated subkey for TGS request: rc4-hmac/25EE (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.957794: etypes requested in TGS request: aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.957842: Encoding request body and padata into FAST request (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.957908: Sending request (8159 bytes) to C.DOMAIN (tcp only) (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.958925: Resolving hostname sdu-vdc0b.c.domain. (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.959950: Initiating TCP connection to stream 10.144.5.28:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.960721: Sending TCP request to stream 10.144.5.28:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.963984: Received answer (8103 bytes) from stream 10.144.5.28:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.964000: Terminating TCP connection to stream 10.144.5.28:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.965074: Response was not from master KDC (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.965095: Decoding FAST response (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.965161: FAST reply key: rc4-hmac/EA06 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.965180: TGS reply is for longina@N.C.DOMAIN -> krbtgt/A.C.DOMAIN@C.DOMAIN with session key rc4-hmac/7993 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.965211: TGS request result: 0/Success (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.965218: Received TGT for service realm: krbtgt/A.C.DOMAIN@C.DOMAIN (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.965224: Requesting tickets for host/lnx-adm557.a.c.domain@A.C.DOMAIN, referrals on (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.965234: Generated subkey for TGS request: rc4-hmac/E3FE (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.965247: etypes requested in TGS request: aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.965291: Encoding request body and padata into FAST request (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.965361: Sending request (8186 bytes) to A.C.DOMAIN (tcp only) (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.966335: Resolving hostname adm-vdc0c.a.c.domain. (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.967602: Initiating TCP connection to stream 10.144.5.7:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.973476: Sending TCP request to stream 10.144.5.7:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.993627: Received answer (8380 bytes) from stream 10.144.5.7:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.993669: Terminating TCP connection to stream 10.144.5.7:88 (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.994967: Response was not from master KDC (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.994998: Decoding FAST response (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.995076: FAST reply key: rc4-hmac/5AAF (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.995099: TGS reply is for longina@N.C.DOMAIN -> host/lnx-adm557.a.c.domain@A.C.DOMAIN with session key aes256-cts/724B (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.995134: TGS request result: 0/Success (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.995140: Received creds for desired service host/lnx-adm557.a.c.domain@A.C.DOMAIN (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.995148: Storing longina@N.C.DOMAIN -> host/lnx-adm557.a.c.domain@A.C.DOMAIN in MEMORY:G3xQC8R (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.995173: Creating authenticator for longina@N.C.DOMAIN -> host/lnx-adm557.a.c.domain@A.C.DOMAIN, seqnum 0, subkey (null), session key aes256-cts/724B (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.995232: Retrieving host/lnx-adm557.a.c.domain@A.C.DOMAIN from MEMORY:/etc/krb5.keytab (vno 6, enctype aes256-cts) with result: 0/Success (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.995323: Decrypted AP-REQ with specified server principal host/lnx-adm557.a.c.domain@A.C.DOMAIN: aes256-cts/DDBF (Wed Nov 9 15:00:43 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700043.995333: AP-REQ ticket: longina@N.C.DOMAIN -> host/lnx-adm557.a.c.domain@A.C.DOMAIN, session key aes256-cts/724B (Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700044.23699: Negotiated enctype based on authenticator: aes256-cts (Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700044.23734: Initializing MEMORY:rd_req2 with default princ longina@N.C.DOMAIN (Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700044.23745: Storing longina@N.C.DOMAIN -> host/lnx-adm557.a.c.domain@A.C.DOMAIN in MEMORY:rd_req2 (Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700044.23759: Destroying ccache MEMORY:G3xQC8R (Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [validate_tgt] (0x0400): TGT verified using key for [host/lnx-adm557.a.c.domain@A.C.DOMAIN]. (Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700044.23784: Retrieving longina@N.C.DOMAIN -> host/lnx-adm557.a.c.domain@A.C.DOMAIN from MEMORY:rd_req2 with result: 0/Success (Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700044.23874: Retrieving LNX-ADM557$@A.C.DOMAIN from MEMORY:/etc/krb5.keytab (vno 6, enctype aes256-cts) with result: 0/Success (Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [sss_send_pac] (0x0400): PAC responder contacted. It might take a bit of time in case the cache is not up to date. (Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [sss_child_krb5_trace_cb] (0x4000): [1563] 1478700044.128301: Destroying ccache MEMORY:rd_req2 (Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [sss_get_ccache_name_for_principal] (0x4000): Location: [FILE:/tmp/krb5cc_332405654_XXXXXX] (Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [sss_get_ccache_name_for_principal] (0x2000): krb5_cc_cache_match failed: [-1765328243][Can't find client principal longina@N.C.DOMAIN in cache collection] (Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [create_ccache] (0x4000): Initializing ccache of type [FILE] (Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [create_ccache] (0x4000): returning: 0 (Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [switch_creds] (0x0200): Switch user to [332405654][332405654]. (Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [switch_creds] (0x0200): Already user [332405654]. (Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [k5c_send_data] (0x0200): Received error code 0 (Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [pack_response_packet] (0x2000): response packet size: [142] (Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [k5c_send_data] (0x4000): Response sent. (Wed Nov 9 15:00:44 2016) [[sssd[krb5_child[1563]]]] [main] (0x0400): krb5_child completed successfully