[08/Apr/2019:15:58:06.828219899 -0400] conn=151 op=30 SRCH base="cn=ranges,cn=etc,dc=ipa,dc=domain,dc=com" scope=2 filter="(objectClass=ipaIDRange)" attrs="objectClass cn ipaBaseID ipaBaseRID ipaSecondaryBaseRID ipaIDRangeSize ipaNTTrustedDomainSID ipaRangeType"
[08/Apr/2019:15:58:06.830419998 -0400] conn=151 op=30 RESULT err=0 tag=101 nentries=6 etime=0.0002352533
[08/Apr/2019:15:58:06.831205283 -0400] conn=151 op=31 SRCH base="cn=certmap,dc=ipa,dc=domain,dc=com" scope=2 filter="(|(&(objectClass=ipaCertMapRule)(ipaEnabledFlag=TRUE))(objectClass=ipaCertMapConfigObject))" attrs="objectClass cn ipaCertMapMapRule ipaCertMapMatchRule ipaCertMapPriority associatedDomain ipaCertMapPromptUsername"
[08/Apr/2019:15:58:06.831612673 -0400] conn=151 op=31 RESULT err=0 tag=101 nentries=1 etime=0.0001140551
[08/Apr/2019:15:58:06.953607787 -0400] conn=151 op=32 SRCH base="cn=trusts,dc=ipa,dc=domain,dc=com" scope=2 filter="(objectClass=ipaNTTrustedDomain)" attrs="cn ipaNTFlatName ipaNTTrustedDomainSID ipaNTTrustDirection ipaNTAdditionalSuffixes"
[08/Apr/2019:15:58:06.954547478 -0400] conn=151 op=32 RESULT err=0 tag=101 nentries=5 etime=0.0122892026
[08/Apr/2019:15:58:06.955089671 -0400] conn=151 op=33 SRCH base="cn=default,cn=views,cn=accounts,dc=ipa,dc=domain,dc=com" scope=0 filter="(objectClass=*)" attrs="ipaDomainResolutionOrder"
[08/Apr/2019:15:58:06.955379816 -0400] conn=151 op=33 RESULT err=32 tag=101 nentries=0 etime=0.0000775039
[08/Apr/2019:15:58:07.011852191 -0400] conn=151 op=34 SRCH base="cn=etc,dc=ipa,dc=domain,dc=com" scope=2 filter="(&(cn=ipaConfig)(objectClass=ipaGuiConfig))" attrs="ipaDomainResolutionOrder"
[08/Apr/2019:15:58:07.012207220 -0400] conn=151 op=34 RESULT err=0 tag=101 nentries=1 etime=0.0056788292
[08/Apr/2019:15:58:07.137057125 -0400] conn=151 op=35 SRCH base="cn=Default Trust View,cn=views,cn=accounts,dc=ipa,dc=domain,dc=com" scope=2 filter="(&(objectClass=ipaOverrideAnchor)(ipaAnchorUUID=:SID:S-1-5-21-150927795-2069884688-1238954376-150296))" attrs=ALL
[08/Apr/2019:15:58:07.137432432 -0400] conn=151 op=35 RESULT err=0 tag=101 nentries=1 etime=0.1874822411
[08/Apr/2019:15:58:07.138057552 -0400] conn=151 op=36 SRCH base="cn=Default Trust View,cn=views,cn=accounts,dc=ipa,dc=domain,dc=com" scope=2 filter="(&(objectClass=ipaOverrideAnchor)(ipaAnchorUUID=:SID:S-1-5-21-1174613319-2826275069-309285752-101506))" attrs=ALL
[08/Apr/2019:15:58:07.138231939 -0400] conn=151 op=36 RESULT err=0 tag=101 nentries=0 etime=0.0000752359
[08/Apr/2019:15:58:07.138402579 -0400] conn=151 op=37 SRCH base="cn=Default Trust View,cn=views,cn=accounts,dc=ipa,dc=domain,dc=com" scope=2 filter="(&(objectClass=ipaOverrideAnchor)(ipaAnchorUUID=:SID:S-1-5-21-1174613319-2826275069-309285752-512))" attrs=ALL
[08/Apr/2019:15:58:07.138585633 -0400] conn=151 op=37 RESULT err=0 tag=101 nentries=0 etime=0.0000313706
[08/Apr/2019:15:58:07.138786172 -0400] conn=151 op=38 SRCH base="cn=accounts,dc=ipa,dc=domain,dc=com" scope=2 filter="(objectClass=ipaexternalgroup)" attrs=ALL
[08/Apr/2019:15:58:07.139576830 -0400] conn=151 op=38 RESULT err=0 tag=101 nentries=2 etime=0.0000952709
[08/Apr/2019:15:58:07.203773734 -0400] conn=151 op=39 SRCH base="cn=accounts,dc=ipa,dc=domain,dc=com" scope=2 filter="(&(cn=0f332b96-5629-11e9-a95e-d4ae52a0ecfe)(|(objectClass=ipaUserGroup)(objectClass=posixGroup))(cn=*)(&(gidNumber=*)(!(gidNumber=0))))" attrs="objectClass posixgroup cn userPassword gidNumber member ipaUniqueID ipaNTSecurityIdentifier modifyTimestamp entryusn ipaExternalMember"
[08/Apr/2019:15:58:07.203917323 -0400] conn=151 op=39 RESULT err=0 tag=101 nentries=0 etime=0.0064299540
[08/Apr/2019:15:58:07.276938708 -0400] conn=155 fd=127 slot=127 connection from IPA.SERVER.IP.ADDRESS to IPA.SERVER.IP.ADDRESS
[08/Apr/2019:15:58:07.279809270 -0400] conn=10 op=81 SRCH base="dc=ipa,dc=domain,dc=com" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/IPA.DOMAIN.COM@IPA.DOMAIN.COM)(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/IPA.DOMAIN.COM@IPA.DOMAIN.COM)))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink objectClass"
[08/Apr/2019:15:58:07.280160057 -0400] conn=10 op=81 RESULT err=0 tag=101 nentries=1 etime=0.0000459257
[08/Apr/2019:15:58:07.280241561 -0400] conn=10 op=82 SRCH base="cn=ipaConfig,cn=etc,dc=ipa,dc=domain,dc=com" scope=0 filter="(objectClass=*)" attrs="ipaConfigString ipaKrbAuthzData ipaUserAuthType"
[08/Apr/2019:15:58:07.280310207 -0400] conn=10 op=82 RESULT err=0 tag=101 nentries=1 etime=0.0000131027
[08/Apr/2019:15:58:07.280751307 -0400] conn=10 op=83 SRCH base="dc=ipa,dc=domain,dc=com" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=ldap/ipaserver.ipa.domain.com@IPA.DOMAIN.COM)(krbPrincipalName:caseIgnoreIA5Match:=ldap/ipaserver.ipa.domain.com@IPA.DOMAIN.COM)))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink objectClass"
[08/Apr/2019:15:58:07.281006248 -0400] conn=10 op=83 RESULT err=0 tag=101 nentries=1 etime=0.0000681608
[08/Apr/2019:15:58:07.281155696 -0400] conn=10 op=84 SRCH base="cn=IPA.DOMAIN.COM,cn=kerberos,dc=ipa,dc=domain,dc=com" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags"
[08/Apr/2019:15:58:07.281225859 -0400] conn=10 op=84 RESULT err=0 tag=101 nentries=1 etime=0.0000201664
[08/Apr/2019:15:58:07.281327210 -0400] conn=10 op=85 SRCH base="dc=ipa,dc=domain,dc=com" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal))(krbPrincipalName=HTTP/ipaserver.ipa.domain.com@IPA.DOMAIN.COM))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink objectClass"
[08/Apr/2019:15:58:07.281506338 -0400] conn=10 op=85 RESULT err=0 tag=101 nentries=1 etime=0.0000266785
[08/Apr/2019:15:58:07.281694731 -0400] conn=10 op=86 SRCH base="cn=IPA.DOMAIN.COM,cn=kerberos,dc=ipa,dc=domain,dc=com" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags"
[08/Apr/2019:15:58:07.281777853 -0400] conn=10 op=86 RESULT err=0 tag=101 nentries=1 etime=0.0000255402
[08/Apr/2019:15:58:07.281943486 -0400] conn=10 op=87 SRCH base="dc=ipa,dc=domain,dc=com" scope=2 filter="(&(objectClass=ipaKrb5DelegationACL)(memberPrincipal=HTTP/ipaserver.ipa.domain.com@IPA.DOMAIN.COM))" attrs="objectClass memberPrincipal"
[08/Apr/2019:15:58:07.282182397 -0400] conn=10 op=87 RESULT err=0 tag=101 nentries=1 etime=0.0000388963
[08/Apr/2019:15:58:07.282354109 -0400] conn=10 op=88 SRCH base="dc=ipa,dc=domain,dc=com" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal))(krbPrincipalName=desantis@AD.DOMAIN.COM))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink objectClass"
[08/Apr/2019:15:58:07.282447648 -0400] conn=10 op=88 RESULT err=0 tag=101 nentries=0 etime=0.0000250747
[08/Apr/2019:15:58:07.284423370 -0400] conn=155 op=0 BIND dn="" method=sasl version=3 mech=GSS-SPNEGO
[08/Apr/2019:15:58:07.353126377 -0400] conn=155 op=0 RESULT err=49 tag=97 nentries=0 etime=0.0068903273 - SASL(-14): authorization failure: 
[08/Apr/2019:15:58:07.353701909 -0400] conn=155 op=1 UNBIND
[08/Apr/2019:15:58:07.353733571 -0400] conn=155 op=1 fd=127 closed - U1
[08/Apr/2019:15:58:07.398716676 -0400] conn=156 fd=127 slot=127 connection from IPA.SERVER.IP.ADDRESS to IPA.SERVER.IP.ADDRESS
[08/Apr/2019:15:58:07.401613238 -0400] conn=4 op=72 SRCH base="dc=ipa,dc=domain,dc=com" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/IPA.DOMAIN.COM@IPA.DOMAIN.COM)(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/IPA.DOMAIN.COM@IPA.DOMAIN.COM)))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink objectClass"
[08/Apr/2019:15:58:07.401891503 -0400] conn=4 op=72 RESULT err=0 tag=101 nentries=1 etime=0.0000472649
[08/Apr/2019:15:58:07.402014269 -0400] conn=4 op=73 SRCH base="cn=ipaConfig,cn=etc,dc=ipa,dc=domain,dc=com" scope=0 filter="(objectClass=*)" attrs="ipaConfigString ipaKrbAuthzData ipaUserAuthType"
[08/Apr/2019:15:58:07.402094183 -0400] conn=4 op=73 RESULT err=0 tag=101 nentries=1 etime=0.0000183712
[08/Apr/2019:15:58:07.402495920 -0400] conn=4 op=74 SRCH base="dc=ipa,dc=domain,dc=com" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=ldap/ipaserver.ipa.domain.com@IPA.DOMAIN.COM)(krbPrincipalName:caseIgnoreIA5Match:=ldap/ipaserver.ipa.domain.com@IPA.DOMAIN.COM)))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink objectClass"
[08/Apr/2019:15:58:07.402764935 -0400] conn=4 op=74 RESULT err=0 tag=101 nentries=1 etime=0.0000655408
[08/Apr/2019:15:58:07.402930484 -0400] conn=4 op=75 SRCH base="cn=IPA.DOMAIN.COM,cn=kerberos,dc=ipa,dc=domain,dc=com" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags"
[08/Apr/2019:15:58:07.403012689 -0400] conn=4 op=75 RESULT err=0 tag=101 nentries=1 etime=0.0000229856
[08/Apr/2019:15:58:07.403148136 -0400] conn=4 op=76 SRCH base="dc=ipa,dc=domain,dc=com" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal))(krbPrincipalName=HTTP/ipaserver.ipa.domain.com@IPA.DOMAIN.COM))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink objectClass"
[08/Apr/2019:15:58:07.403346287 -0400] conn=4 op=76 RESULT err=0 tag=101 nentries=1 etime=0.0000318174
[08/Apr/2019:15:58:07.403463505 -0400] conn=4 op=77 SRCH base="cn=IPA.DOMAIN.COM,cn=kerberos,dc=ipa,dc=domain,dc=com" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags"
[08/Apr/2019:15:58:07.403532359 -0400] conn=4 op=77 RESULT err=0 tag=101 nentries=1 etime=0.0000169748
[08/Apr/2019:15:58:07.403677946 -0400] conn=4 op=78 SRCH base="dc=ipa,dc=domain,dc=com" scope=2 filter="(&(objectClass=ipaKrb5DelegationACL)(memberPrincipal=HTTP/ipaserver.ipa.domain.com@IPA.DOMAIN.COM))" attrs="objectClass memberPrincipal"
[08/Apr/2019:15:58:07.403896980 -0400] conn=4 op=78 RESULT err=0 tag=101 nentries=1 etime=0.0000340278
[08/Apr/2019:15:58:07.404098402 -0400] conn=4 op=79 SRCH base="dc=ipa,dc=domain,dc=com" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal))(krbPrincipalName=desantis@AD.DOMAIN.COM))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink objectClass"
[08/Apr/2019:15:58:07.404206745 -0400] conn=4 op=79 RESULT err=0 tag=101 nentries=0 etime=0.0000295269
[08/Apr/2019:15:58:07.406157273 -0400] conn=156 op=0 BIND dn="" method=sasl version=3 mech=GSS-SPNEGO
[08/Apr/2019:15:58:07.436644735 -0400] conn=156 op=0 RESULT err=49 tag=97 nentries=0 etime=0.0030691229 - SASL(-14): authorization failure: 
[08/Apr/2019:15:58:07.437259131 -0400] conn=156 op=1 UNBIND
[08/Apr/2019:15:58:07.437281332 -0400] conn=156 op=1 fd=127 closed - U1
[08/Apr/2019:15:58:12.872234822 -0400] conn=157 fd=127 slot=127 connection from IPA.SERVER.IP.ADDRESS to IPA.SERVER.IP.ADDRESS
[08/Apr/2019:15:58:12.874969578 -0400] conn=157 op=0 BIND dn="" method=sasl version=3 mech=GSS-SPNEGO
[08/Apr/2019:15:58:12.900792537 -0400] conn=157 op=0 RESULT err=49 tag=97 nentries=0 etime=0.0026012783 - SASL(-14): authorization failure: 
[08/Apr/2019:15:58:12.901218733 -0400] conn=157 op=1 UNBIND
[08/Apr/2019:15:58:12.901234988 -0400] conn=157 op=1 fd=127 closed - U1
[08/Apr/2019:15:58:13.031226604 -0400] conn=158 fd=127 slot=127 connection from IPA.SERVER.IP.ADDRESS to IPA.SERVER.IP.ADDRESS
[08/Apr/2019:15:58:13.033671151 -0400] conn=15 op=252 SRCH base="dc=ipa,dc=domain,dc=com" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=krbtgt/IPA.DOMAIN.COM@IPA.DOMAIN.COM)(krbPrincipalName:caseIgnoreIA5Match:=krbtgt/IPA.DOMAIN.COM@IPA.DOMAIN.COM)))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink objectClass"
[08/Apr/2019:15:58:13.034043773 -0400] conn=15 op=252 RESULT err=0 tag=101 nentries=1 etime=0.0000613848
[08/Apr/2019:15:58:13.034181173 -0400] conn=15 op=253 SRCH base="cn=ipaConfig,cn=etc,dc=ipa,dc=domain,dc=com" scope=0 filter="(objectClass=*)" attrs="ipaConfigString ipaKrbAuthzData ipaUserAuthType"
[08/Apr/2019:15:58:13.034264937 -0400] conn=15 op=253 RESULT err=0 tag=101 nentries=1 etime=0.0000197330
[08/Apr/2019:15:58:13.034732741 -0400] conn=15 op=254 SRCH base="dc=ipa,dc=domain,dc=com" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal)(objectClass=ipakrbprincipal))(|(ipaKrbPrincipalAlias=ldap/ipaserver.ipa.domain.com@IPA.DOMAIN.COM)(krbPrincipalName:caseIgnoreIA5Match:=ldap/ipaserver.ipa.domain.com@IPA.DOMAIN.COM)))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink objectClass"
[08/Apr/2019:15:58:13.034973520 -0400] conn=15 op=254 RESULT err=0 tag=101 nentries=1 etime=0.0000692748
[08/Apr/2019:15:58:13.035155432 -0400] conn=15 op=255 SRCH base="cn=IPA.DOMAIN.COM,cn=kerberos,dc=ipa,dc=domain,dc=com" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags"
[08/Apr/2019:15:58:13.035241734 -0400] conn=15 op=255 RESULT err=0 tag=101 nentries=1 etime=0.0000249691
[08/Apr/2019:15:58:13.035313097 -0400] conn=15 op=256 SRCH base="dc=ipa,dc=domain,dc=com" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal))(krbPrincipalName=HTTP/ipaserver.ipa.domain.com@IPA.DOMAIN.COM))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink objectClass"
[08/Apr/2019:15:58:13.035504910 -0400] conn=15 op=256 RESULT err=0 tag=101 nentries=1 etime=0.0000247683
[08/Apr/2019:15:58:13.035641392 -0400] conn=15 op=257 SRCH base="cn=IPA.DOMAIN.COM,cn=kerberos,dc=ipa,dc=domain,dc=com" scope=0 filter="(objectClass=krbticketpolicyaux)" attrs="krbMaxTicketLife krbMaxRenewableAge krbTicketFlags"
[08/Apr/2019:15:58:13.035725794 -0400] conn=15 op=257 RESULT err=0 tag=101 nentries=1 etime=0.0000205053
[08/Apr/2019:15:58:13.035923996 -0400] conn=15 op=258 SRCH base="dc=ipa,dc=domain,dc=com" scope=2 filter="(&(objectClass=ipaKrb5DelegationACL)(memberPrincipal=HTTP/ipaserver.ipa.domain.com@IPA.DOMAIN.COM))" attrs="objectClass memberPrincipal"
[08/Apr/2019:15:58:13.036179999 -0400] conn=15 op=258 RESULT err=0 tag=101 nentries=1 etime=0.0000438455
[08/Apr/2019:15:58:13.036346934 -0400] conn=15 op=259 SRCH base="dc=ipa,dc=domain,dc=com" scope=2 filter="(&(|(objectClass=krbprincipalaux)(objectClass=krbprincipal))(krbPrincipalName=desantis@AD.DOMAIN.COM))" attrs="krbPrincipalName krbCanonicalName krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbPrincipalAuthInd krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink objectClass"
[08/Apr/2019:15:58:13.036456599 -0400] conn=15 op=259 RESULT err=0 tag=101 nentries=0 etime=0.0000260480
[08/Apr/2019:15:58:13.038380044 -0400] conn=158 op=0 BIND dn="" method=sasl version=3 mech=GSS-SPNEGO
[08/Apr/2019:15:58:13.073816032 -0400] conn=158 op=0 RESULT err=49 tag=97 nentries=0 etime=0.0035617044 - SASL(-14): authorization failure: 
[08/Apr/2019:15:58:13.074268551 -0400] conn=158 op=1 UNBIND
[08/Apr/2019:15:58:13.074291061 -0400] conn=158 op=1 fd=127 closed - U1
^C