(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [main] (0x0400): krb5_child started.
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [unpack_buffer] (0x1000): total buffer size: [181]
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [unpack_buffer] (0x0100): cmd [241] uid [xxxxx6683] gid [xxxxx6683] validate [true] enterprise principal [true] offline [false] UPN [first.last@COMPANY.COM]
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [unpack_buffer] (0x0100): ccname: [FILE:/tmp/krb5cc_xxxxx6683_XXXXXX] old_ccname: [FILE:/tmp/krb5cc_xxxxx6683_9sctMM] keytab: [/etc/krb5.keytab]
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [check_use_fast] (0x0100): Not using FAST.
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [switch_creds] (0x0200): Switch user to [xxxxx6683][xxxxx6683].
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_krb5_cc_verify_ccache] (0x2000): TGT not found or expired.
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [switch_creds] (0x0200): Switch user to [0][0].
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [k5c_check_old_ccache] (0x4000): Ccache_file is [FILE:/tmp/krb5cc_xxxxx6683_9sctMM] and is not active and TGT is  valid.
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [k5c_precreate_ccache] (0x4000): Recreating ccache
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [privileged_krb5_setup] (0x0080): Cannot open the PAC responder socket
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [become_user] (0x0200): Trying to become user [xxxxx6683][xxxxx6683].
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [main] (0x2000): Running as [xxxxx6683][xxxxx6683].
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [k5c_setup] (0x2000): Running as [xxxxx6683][xxxxx6683].
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_RENEWABLE_LIFETIME] from environment.
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_LIFETIME] from environment.
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [set_canonicalize_option] (0x0100): SSSD_KRB5_CANONICALIZE is set to [true]
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [main] (0x0400): Will perform online auth
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [tgt_req_child] (0x1000): Attempting to get a TGT
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [DEF.XYZ.LOCAL]
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680143.556973: Getting initial credentials for first.last\@COMPANY.COM@DEF.XYZ.LOCAL
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680143.557229: Sending request (232 bytes) to DEF.XYZ.LOCAL
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680143.557638: Sending initial UDP request to dgram X.X.37.26:88
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680143.558913: Received answer from dgram X.X.37.26:88
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680143.559056: Response was from master KDC
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680143.559125: Received error from KDC: -1765328316/Realm not local to KDC
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680143.559168: Following referral to realm ABC.XYZ.LOCAL
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680143.559265: Sending request (232 bytes) to ABC.XYZ.LOCAL
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680143.560829: Resolving hostname corpdc001.abc.xyz.local.
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680143.567441: Sending initial UDP request to dgram X.X.20.66:88
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680143.576718: Received answer from dgram X.X.20.66:88
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680143.577431: Response was not from master KDC
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680143.577536: Received error from KDC: -1765328359/Additional pre-authentication required
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680143.577632: Processing preauth types: 16, 15, 19, 2
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680143.577690: Selected etype info: etype aes256-cts, salt "ABC.XYZ.LOCALfirst.last", params ""
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680143.602166: AS key obtained for encrypted timestamp: aes256-cts/11B0
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680143.602300: Encrypted timestamp (for 1498680143.602216): plain 301AA011180F32303137303632383230303232335AA1050203093068, encrypted 4D4749AB8C7E0A2FB61738C2C5EE07AC4B187DED86846052BF8906B43C111AB61F4E12CD2DE777261BC82943D415B97E80E0103A2C1C4F58
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680143.602386: Preauth module encrypted_timestamp (2) (flags=1) returned: 0/Success
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680143.602448: Produced preauth for next request: 2
(Wed Jun 28 16:02:23 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680143.602553: Sending request (312 bytes) to ABC.XYZ.LOCAL
(Wed Jun 28 16:02:24 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680144.689654: Response was not from master KDC
(Wed Jun 28 16:02:24 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680144.689738: Received error from KDC: -1765328332/Response too big for UDP, retry with TCP
(Wed Jun 28 16:02:24 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680144.689775: Request or response is too big for UDP; retrying with TCP
(Wed Jun 28 16:02:24 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680144.689805: Sending request (312 bytes) to ABC.XYZ.LOCAL (tcp only)
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680147.719737: Processing preauth types: 19
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680147.719780: Selected etype info: etype aes256-cts, salt "ABC.XYZ.LOCALfirst.last", params ""
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680147.719814: Produced preauth for next request: (empty)
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680147.719850: AS key determined by preauth: aes256-cts/11B0
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680147.719981: Decrypted AS reply; session key is: aes256-cts/20C6
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680147.720051: FAST negotiation: unavailable
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [sss_krb5_expire_callback_func] (0x2000): exp_time: [923071]
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [validate_tgt] (0x2000): Found keytab entry with the realm of the credential.
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680147.720284: Retrieving host/hostname.def.xyz.local@ABC.XYZ.LOCAL from MEMORY:/etc/krb5.keytab (vno 0, enctype 0) with result: 0/Success
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680147.720344: Resolving unique ccache of type MEMORY
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680147.720395: Initializing MEMORY:ctHHOo4 with default princ first.last@ABC.XYZ.LOCAL
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680147.720437: Removing first.last@ABC.XYZ.LOCAL -> krbtgt/ABC.XYZ.LOCAL@ABC.XYZ.LOCAL from MEMORY:ctHHOo4
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680147.720473: Storing first.last@ABC.XYZ.LOCAL -> krbtgt/ABC.XYZ.LOCAL@ABC.XYZ.LOCAL in MEMORY:ctHHOo4
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680147.720532: Getting credentials first.last@ABC.XYZ.LOCAL -> host/hostname.def.xyz.local@ABC.XYZ.LOCAL using ccache MEMORY:ctHHOo4
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680147.720614: Retrieving first.last@ABC.XYZ.LOCAL -> host/hostname.def.xyz.local@ABC.XYZ.LOCAL from MEMORY:ctHHOo4 with result: -1765328243/Matching credential not found
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680147.720691: Retrieving first.last@ABC.XYZ.LOCAL -> krbtgt/ABC.XYZ.LOCAL@ABC.XYZ.LOCAL from MEMORY:ctHHOo4 with result: 0/Success
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680147.720737: Found cached TGT for service realm: first.last@ABC.XYZ.LOCAL -> krbtgt/ABC.XYZ.LOCAL@ABC.XYZ.LOCAL
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680147.720777: Requesting tickets for host/hostname.def.xyz.local@ABC.XYZ.LOCAL, referrals on
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680147.720845: Generated subkey for TGS request: aes256-cts/D868
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680147.720891: etypes requested in TGS request: aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac
(Wed Jun 28 16:02:27 2017) [[sssd[krb5_child[23140]]]] [sss_child_krb5_trace_cb] (0x4000): [23140] 1498680147.721078: Sending request (1750 bytes) to ABC.XYZ.LOCAL
(Wed Jun 28 16:02:29 2017) [[sssd[krb5_child[23141]]]] [main] (0x0400): krb5_child started.
(Wed Jun 28 16:02:29 2017) [[sssd[krb5_child[23141]]]] [unpack_buffer] (0x1000): total buffer size: [181]
(Wed Jun 28 16:02:29 2017) [[sssd[krb5_child[23141]]]] [unpack_buffer] (0x0100): cmd [241] uid [xxxxx6683] gid [xxxxx6683] validate [true] enterprise principal [false] offline [true] UPN [first.last@COMPANY.COM]
(Wed Jun 28 16:02:29 2017) [[sssd[krb5_child[23141]]]] [unpack_buffer] (0x0100): ccname: [FILE:/tmp/krb5cc_xxxxx6683_XXXXXX] old_ccname: [FILE:/tmp/krb5cc_xxxxx6683_9sctMM] keytab: [/etc/krb5.keytab]
(Wed Jun 28 16:02:29 2017) [[sssd[krb5_child[23141]]]] [check_use_fast] (0x0100): Not using FAST.
(Wed Jun 28 16:02:29 2017) [[sssd[krb5_child[23141]]]] [switch_creds] (0x0200): Switch user to [xxxxx6683][xxxxx6683].
(Wed Jun 28 16:02:29 2017) [[sssd[krb5_child[23141]]]] [sss_krb5_cc_verify_ccache] (0x2000): TGT not found or expired.
(Wed Jun 28 16:02:29 2017) [[sssd[krb5_child[23141]]]] [switch_creds] (0x0200): Switch user to [0][0].
(Wed Jun 28 16:02:29 2017) [[sssd[krb5_child[23141]]]] [k5c_check_old_ccache] (0x4000): Ccache_file is [FILE:/tmp/krb5cc_xxxxx6683_9sctMM] and is not active and TGT is  valid.
(Wed Jun 28 16:02:29 2017) [[sssd[krb5_child[23141]]]] [privileged_krb5_setup] (0x0080): Cannot open the PAC responder socket
(Wed Jun 28 16:02:29 2017) [[sssd[krb5_child[23141]]]] [become_user] (0x0200): Trying to become user [xxxxx6683][xxxxx6683].
(Wed Jun 28 16:02:29 2017) [[sssd[krb5_child[23141]]]] [main] (0x2000): Running as [xxxxx6683][xxxxx6683].
(Wed Jun 28 16:02:29 2017) [[sssd[krb5_child[23141]]]] [become_user] (0x0200): Trying to become user [xxxxx6683][xxxxx6683].
(Wed Jun 28 16:02:29 2017) [[sssd[krb5_child[23141]]]] [become_user] (0x0200): Already user [xxxxx6683].
(Wed Jun 28 16:02:29 2017) [[sssd[krb5_child[23141]]]] [k5c_setup] (0x2000): Running as [xxxxx6683][xxxxx6683].
(Wed Jun 28 16:02:29 2017) [[sssd[krb5_child[23141]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_RENEWABLE_LIFETIME] from environment.
(Wed Jun 28 16:02:29 2017) [[sssd[krb5_child[23141]]]] [set_lifetime_options] (0x0100): Cannot read [SSSD_KRB5_LIFETIME] from environment.
(Wed Jun 28 16:02:29 2017) [[sssd[krb5_child[23141]]]] [main] (0x0400): Will perform offline auth
(Wed Jun 28 16:02:29 2017) [[sssd[krb5_child[23141]]]] [create_empty_ccache] (0x1000): Existing ccache still valid, reusing