Here 22.07.2018, 16:32, "Alexander Bokovoy" <aboko...@redhat.com>: > On su, 22 heinä 2018, Николай Савельев wrote: >> 22.07.2018, 14:16, "Alexander Bokovoy" <aboko...@redhat.com>: >> >>> Again, show sssd logs. I suspect it is something with communicating to >>> your AD DCs because SSSD doesn't use anything else to authenticate. >> Here you are > > So, SSSD is not able to communicate with AD DCs and puts the domain > offline. You can see in /var/log/sssd/krb5_child.log and ldap_child.log > for details on why thing fail. > -- С уважением, Николай.
(Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [main] (0x0400): krb5_child started. (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [unpack_buffer] (0x1000): total buffer size: [154] (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [unpack_buffer] (0x0100): cmd [249] uid [1837401456] gid [1837401456] validate [true] enterprise principal [false] offline [true] UPN [savelev@START-LINE.LOCAL] (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [unpack_buffer] (0x0100): ccname: [KEYRING:persistent:1837401456] old_ccname: [KEYRING:persistent:1837401456] keytab: [/etc/krb5.keytab] (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [become_user] (0x0200): Trying to become user [1837401456][1837401456]. (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [main] (0x2000): Running as [1837401456][1837401456]. (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [become_user] (0x0200): Trying to become user [1837401456][1837401456]. (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [become_user] (0x0200): Already user [1837401456]. (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [k5c_setup] (0x2000): Running as [1837401456][1837401456]. (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [set_lifetime_options] (0x0100): No specific renewable lifetime requested. (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [set_lifetime_options] (0x0100): No specific lifetime requested. (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [main] (0x0400): Will perform pre-auth (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [tgt_req_child] (0x1000): Attempting to get a TGT (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [START-LINE.LOCAL] (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80601: Getting initial credentials for savelev@START-LINE.LOCAL
(Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80603: Sending request (183 bytes) to START-LINE.LOCAL (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80604: Resolving hostname ad.start-line.local. (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80605: Resolving hostname ad2.start-line.local. (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80606: Resolving hostname ad.start-line.local. (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80607: Initiating TCP connection to stream 192.168.2.10:88 (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80608: Sending TCP request to stream 192.168.2.10:88 (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80609: Received answer (199 bytes) from stream 192.168.2.10:88 (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80610: Terminating TCP connection to stream 192.168.2.10:88 (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80611: Response was not from master KDC (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80612: Received error from KDC: -1765328359/Additional pre-authentication required (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80615: Processing preauth types: 16, 15, 19, 2 (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80616: Selected etype info: etype aes256-cts, salt "START-LINE.LOCALsavelev", params "" (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80617: PKINIT client has no configured identity; giving up (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_krb5_responder] (0x4000): Got question [password]. (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80618: PKINIT client has no configured identity; giving up (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80619: Preauth module pkinit (16) (real) returned: 22/Invalid argument (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80620: PKINIT client has no configured identity; giving up (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80621: Preauth module pkinit (14) (real) returned: 22/Invalid argument (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_krb5_prompter] (0x4000): sss_krb5_prompter name [(null)] banner [(null)] num_prompts [1] EINVAL. (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_krb5_prompter] (0x4000): Prompt [0][Password for savelev@START-LINE.LOCAL]. (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_krb5_prompter] (0x0020): Cannot handle password prompts. (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80622: Preauth module encrypted_timestamp (2) (real) returned: -1765328254/Cannot read password (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80623: Retrying AS request with master KDC (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80624: Getting initial credentials for savelev@START-LINE.LOCAL (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [sss_child_krb5_trace_cb] (0x4000): [9293] 1532249660.80626: Sending request (183 bytes) to START-LINE.LOCAL (master) (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [get_and_save_tgt] (0x0400): krb5_get_init_creds_password returned [-1765328174] during pre-auth. (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [k5c_send_data] (0x0200): Received error code 0 (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [pack_response_packet] (0x2000): response packet size: [12] (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [k5c_send_data] (0x4000): Response sent. (Sun Jul 22 15:54:20 2018) [[sssd[krb5_child[9293]]]] [main] (0x0400): krb5_child completed successfully (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [main] (0x0400): krb5_child started. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [unpack_buffer] (0x1000): total buffer size: [163] (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [unpack_buffer] (0x0100): cmd [241] uid [1837401456] gid [1837401456] validate [true] enterprise principal [false] offline [true] UPN [savelev@START-LINE.LOCAL] (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [unpack_buffer] (0x0100): ccname: [KEYRING:persistent:1837401456] old_ccname: [KEYRING:persistent:1837401456] keytab: [/etc/krb5.keytab] (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [switch_creds] (0x0200): Switch user to [1837401456][1837401456]. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [sss_krb5_cc_verify_ccache] (0x2000): TGT not found or expired. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [switch_creds] (0x0200): Switch user to [0][0]. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [k5c_check_old_ccache] (0x4000): Ccache_file is [KEYRING:persistent:1837401456] and is not active and TGT is valid. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [become_user] (0x0200): Trying to become user [1837401456][1837401456]. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [main] (0x2000): Running as [1837401456][1837401456]. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [become_user] (0x0200): Trying to become user [1837401456][1837401456]. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [become_user] (0x0200): Already user [1837401456]. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [k5c_setup] (0x2000): Running as [1837401456][1837401456]. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [set_lifetime_options] (0x0100): No specific renewable lifetime requested. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [set_lifetime_options] (0x0100): No specific lifetime requested. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [main] (0x0400): Will perform offline auth (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [create_empty_ccache] (0x1000): Existing ccache still valid, reusing (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [k5c_send_data] (0x0200): Received error code 0 (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [pack_response_packet] (0x2000): response packet size: [53] (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [k5c_send_data] (0x4000): Response sent. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9298]]]] [main] (0x0400): krb5_child completed successfully (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [main] (0x0400): krb5_child started. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [unpack_buffer] (0x1000): total buffer size: [154] (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [unpack_buffer] (0x0100): cmd [249] uid [1837401456] gid [1837401456] validate [true] enterprise principal [false] offline [true] UPN [savelev@START-LINE.LOCAL] (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [unpack_buffer] (0x0100): ccname: [KEYRING:persistent:1837401456] old_ccname: [KEYRING:persistent:1837401456] keytab: [/etc/krb5.keytab] (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [become_user] (0x0200): Trying to become user [1837401456][1837401456]. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [main] (0x2000): Running as [1837401456][1837401456]. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [become_user] (0x0200): Trying to become user [1837401456][1837401456]. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [become_user] (0x0200): Already user [1837401456]. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [k5c_setup] (0x2000): Running as [1837401456][1837401456]. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [set_lifetime_options] (0x0100): No specific renewable lifetime requested. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [set_lifetime_options] (0x0100): No specific lifetime requested. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [main] (0x0400): Will perform pre-auth (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [tgt_req_child] (0x1000): Attempting to get a TGT (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [START-LINE.LOCAL] (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945569: Getting initial credentials for savelev@START-LINE.LOCAL (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945571: Sending request (183 bytes) to START-LINE.LOCAL (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945572: Resolving hostname ad2.start-line.local. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945573: Resolving hostname ad.start-line.local. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945574: Resolving hostname ad2.start-line.local. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945575: Initiating TCP connection to stream 192.168.2.4:88 (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945576: Sending TCP request to stream 192.168.2.4:88 (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945577: Received answer (199 bytes) from stream 192.168.2.4:88 (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945578: Terminating TCP connection to stream 192.168.2.4:88 (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945579: Response was not from master KDC (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945580: Received error from KDC: -1765328359/Additional pre-authentication required (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945583: Processing preauth types: 16, 15, 19, 2 (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945584: Selected etype info: etype aes256-cts, salt "START-LINE.LOCALsavelev", params "" (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945585: PKINIT client has no configured identity; giving up (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_krb5_responder] (0x4000): Got question [password]. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945586: PKINIT client has no configured identity; giving up (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945587: Preauth module pkinit (16) (real) returned: 22/Invalid argument (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945588: PKINIT client has no configured identity; giving up (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945589: Preauth module pkinit (14) (real) returned: 22/Invalid argument (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_krb5_prompter] (0x4000): sss_krb5_prompter name [(null)] banner [(null)] num_prompts [1] EINVAL. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_krb5_prompter] (0x4000): Prompt [0][Password for savelev@START-LINE.LOCAL]. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_krb5_prompter] (0x0020): Cannot handle password prompts. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945590: Preauth module encrypted_timestamp (2) (real) returned: -1765328254/Cannot read password (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945591: Retrying AS request with master KDC (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945592: Getting initial credentials for savelev@START-LINE.LOCAL (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [sss_child_krb5_trace_cb] (0x4000): [9310] 1532249668.945594: Sending request (183 bytes) to START-LINE.LOCAL (master) (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [get_and_save_tgt] (0x0400): krb5_get_init_creds_password returned [-1765328174] during pre-auth. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [k5c_send_data] (0x0200): Received error code 0 (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [pack_response_packet] (0x2000): response packet size: [12] (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [k5c_send_data] (0x4000): Response sent. (Sun Jul 22 15:54:28 2018) [[sssd[krb5_child[9310]]]] [main] (0x0400): krb5_child completed successfully (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [main] (0x0400): krb5_child started. (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [unpack_buffer] (0x1000): total buffer size: [163] (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [unpack_buffer] (0x0100): cmd [241] uid [1837401456] gid [1837401456] validate [true] enterprise principal [false] offline [true] UPN [savelev@START-LINE.LOCAL] (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [unpack_buffer] (0x0100): ccname: [KEYRING:persistent:1837401456] old_ccname: [KEYRING:persistent:1837401456] keytab: [/etc/krb5.keytab] (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [switch_creds] (0x0200): Switch user to [1837401456][1837401456]. (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [sss_krb5_cc_verify_ccache] (0x2000): TGT not found or expired. (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [switch_creds] (0x0200): Switch user to [0][0]. (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [k5c_check_old_ccache] (0x4000): Ccache_file is [KEYRING:persistent:1837401456] and is not active and TGT is valid. (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [become_user] (0x0200): Trying to become user [1837401456][1837401456]. (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [main] (0x2000): Running as [1837401456][1837401456]. (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [become_user] (0x0200): Trying to become user [1837401456][1837401456]. (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [become_user] (0x0200): Already user [1837401456]. (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [k5c_setup] (0x2000): Running as [1837401456][1837401456]. (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [set_lifetime_options] (0x0100): No specific renewable lifetime requested. (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [set_lifetime_options] (0x0100): No specific lifetime requested. (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [main] (0x0400): Will perform offline auth (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [create_empty_ccache] (0x1000): Existing ccache still valid, reusing (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [k5c_send_data] (0x0200): Received error code 0 (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [pack_response_packet] (0x2000): response packet size: [53] (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [k5c_send_data] (0x4000): Response sent. (Sun Jul 22 15:54:35 2018) [[sssd[krb5_child[9319]]]] [main] (0x0400): krb5_child completed successfully (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [main] (0x0400): krb5_child started. (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [unpack_buffer] (0x1000): total buffer size: [154] (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [unpack_buffer] (0x0100): cmd [249] uid [1837401456] gid [1837401456] validate [true] enterprise principal [false] offline [true] UPN [savelev@START-LINE.LOCAL] (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [unpack_buffer] (0x0100): ccname: [KEYRING:persistent:1837401456] old_ccname: [KEYRING:persistent:1837401456] keytab: [/etc/krb5.keytab] (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [become_user] (0x0200): Trying to become user [1837401456][1837401456]. (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [main] (0x2000): Running as [1837401456][1837401456]. (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [become_user] (0x0200): Trying to become user [1837401456][1837401456]. (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [become_user] (0x0200): Already user [1837401456]. (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [k5c_setup] (0x2000): Running as [1837401456][1837401456]. (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [set_lifetime_options] (0x0100): No specific renewable lifetime requested. (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [set_lifetime_options] (0x0100): No specific lifetime requested. (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [main] (0x0400): Will perform pre-auth (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [tgt_req_child] (0x1000): Attempting to get a TGT (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [START-LINE.LOCAL] (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380822: Getting initial credentials for savelev@START-LINE.LOCAL (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380824: Sending request (183 bytes) to START-LINE.LOCAL (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380825: Resolving hostname ad2.start-line.local. (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380826: Resolving hostname ad.start-line.local. (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380827: Resolving hostname ad2.start-line.local. (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380828: Initiating TCP connection to stream 192.168.2.4:88 (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380829: Sending TCP request to stream 192.168.2.4:88 (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380830: Received answer (199 bytes) from stream 192.168.2.4:88 (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380831: Terminating TCP connection to stream 192.168.2.4:88 (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380832: Response was not from master KDC (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380833: Received error from KDC: -1765328359/Additional pre-authentication required (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380836: Processing preauth types: 16, 15, 19, 2 (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380837: Selected etype info: etype aes256-cts, salt "START-LINE.LOCALsavelev", params "" (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380838: PKINIT client has no configured identity; giving up (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_krb5_responder] (0x4000): Got question [password]. (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380839: PKINIT client has no configured identity; giving up (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380840: Preauth module pkinit (16) (real) returned: 22/Invalid argument (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380841: PKINIT client has no configured identity; giving up (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380842: Preauth module pkinit (14) (real) returned: 22/Invalid argument (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_krb5_prompter] (0x4000): sss_krb5_prompter name [(null)] banner [(null)] num_prompts [1] EINVAL. (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_krb5_prompter] (0x4000): Prompt [0][Password for savelev@START-LINE.LOCAL]. (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_krb5_prompter] (0x0020): Cannot handle password prompts. (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380843: Preauth module encrypted_timestamp (2) (real) returned: -1765328254/Cannot read password (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380844: Retrying AS request with master KDC (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380845: Getting initial credentials for savelev@START-LINE.LOCAL (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [sss_child_krb5_trace_cb] (0x4000): [9331] 1532249676.380847: Sending request (183 bytes) to START-LINE.LOCAL (master) (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [get_and_save_tgt] (0x0400): krb5_get_init_creds_password returned [-1765328174] during pre-auth. (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [k5c_send_data] (0x0200): Received error code 0 (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [pack_response_packet] (0x2000): response packet size: [12] (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [k5c_send_data] (0x4000): Response sent. (Sun Jul 22 15:54:36 2018) [[sssd[krb5_child[9331]]]] [main] (0x0400): krb5_child completed successfully (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [main] (0x0400): krb5_child started. (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [unpack_buffer] (0x1000): total buffer size: [163] (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [unpack_buffer] (0x0100): cmd [241] uid [1837401456] gid [1837401456] validate [true] enterprise principal [false] offline [true] UPN [savelev@START-LINE.LOCAL] (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [unpack_buffer] (0x0100): ccname: [KEYRING:persistent:1837401456] old_ccname: [KEYRING:persistent:1837401456] keytab: [/etc/krb5.keytab] (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [switch_creds] (0x0200): Switch user to [1837401456][1837401456]. (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [sss_krb5_cc_verify_ccache] (0x2000): TGT not found or expired. (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [switch_creds] (0x0200): Switch user to [0][0]. (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [k5c_check_old_ccache] (0x4000): Ccache_file is [KEYRING:persistent:1837401456] and is not active and TGT is valid. (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [become_user] (0x0200): Trying to become user [1837401456][1837401456]. (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [main] (0x2000): Running as [1837401456][1837401456]. (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [become_user] (0x0200): Trying to become user [1837401456][1837401456]. (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [become_user] (0x0200): Already user [1837401456]. (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [k5c_setup] (0x2000): Running as [1837401456][1837401456]. (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [set_lifetime_options] (0x0100): No specific renewable lifetime requested. (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [set_lifetime_options] (0x0100): No specific lifetime requested. (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [main] (0x0400): Will perform offline auth (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [create_empty_ccache] (0x1000): Existing ccache still valid, reusing (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [k5c_send_data] (0x0200): Received error code 0 (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [pack_response_packet] (0x2000): response packet size: [53] (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [k5c_send_data] (0x4000): Response sent. (Sun Jul 22 15:54:42 2018) [[sssd[krb5_child[9337]]]] [main] (0x0400): krb5_child completed successfully (Sun Jul 22 16:10:06 2018) [[sssd[krb5_child[9747]]]] [main] (0x0400): krb5_child started.
(Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [main] (0x0400): ldap_child started. (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [main] (0x2000): context initialized (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [unpack_buffer] (0x1000): total buffer size: 44 (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [unpack_buffer] (0x1000): realm_str size: 6 (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [unpack_buffer] (0x1000): got realm_str: FS.LAN (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [unpack_buffer] (0x1000): princ_str size: 14 (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [unpack_buffer] (0x1000): got princ_str: host/dc.fs.lan (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [unpack_buffer] (0x1000): keytab_name size: 0 (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [unpack_buffer] (0x1000): lifetime: 86400 (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [unpack_buffer] (0x0200): Will run as [0][0]. (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [privileged_krb5_setup] (0x2000): Kerberos context initialized (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [main] (0x2000): Kerberos context initialized (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [become_user] (0x0200): Trying to become user [0][0]. (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [become_user] (0x0200): Already user [0]. (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [main] (0x2000): Running as [0][0]. (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [main] (0x2000): getting TGT sync (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [ldap_child_get_tgt_sync] (0x2000): got realm_name: [FS.LAN] (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [ldap_child_get_tgt_sync] (0x0100): Principal name is: [host/dc.fs....@fs.lan] (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [ldap_child_get_tgt_sync] (0x0100): Using keytab [MEMORY:/etc/krb5.keytab] (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [ldap_child_get_tgt_sync] (0x0100): Will canonicalize principals (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705079: Getting initial credentials for host/dc.fs....@fs.lan (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705080: Looked up etypes in keytab: aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705082: Sending request (171 bytes) to FS.LAN (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705083: Initiating TCP connection to stream 192.168.2.254:88 (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705084: Sending TCP request to stream 192.168.2.254:88 (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705085: Received answer (299 bytes) from stream 192.168.2.254:88 (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705086: Terminating TCP connection to stream 192.168.2.254:88 (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705087: Response was from master KDC (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705088: Received error from KDC: -1765328359/Additional pre-authentication required (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705091: Processing preauth types: 16, 15, 14, 136, 19, 147, 2, 133 (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705092: Selected etype info: etype aes256-cts, salt "FS.LANhostdc.fs.lan", params "" (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705093: Received cookie: MIT (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705094: PKINIT client has no configured identity; giving up (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705095: Preauth module pkinit (147) (info) returned: 0/Success (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705096: PKINIT client has no configured identity; giving up (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705097: Preauth module pkinit (16) (real) returned: 22/Invalid argument (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705098: PKINIT client has no configured identity; giving up (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705099: Preauth module pkinit (14) (real) returned: 22/Invalid argument (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705100: PKINIT client has no configured identity; giving up (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705101: Preauth module pkinit (14) (real) returned: 22/Invalid argument (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705102: Retrieving host/dc.fs....@fs.lan from MEMORY:/etc/krb5.keytab (vno 0, enctype aes256-cts) with result: 0/Success (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705103: AS key obtained for encrypted timestamp: aes256-cts/711F (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705105: Encrypted timestamp (for 1532249636.709295): plain 301AA011180F32303138303732323038353335365AA10502030AD2AF, encrypted CE4EA273B0060C2A85960FE019B7E463B0BE604E019BDDD5F73D9FD42E02E65635EA71A1F0E7F2D3BF498F77267046D9DD4EBB8C06F0D928 (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705106: Preauth module encrypted_timestamp (2) (real) returned: 0/Success (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705107: Produced preauth for next request: 133, 2 (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705108: Sending request (266 bytes) to FS.LAN (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705109: Initiating TCP connection to stream 192.168.2.254:88 (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705110: Sending TCP request to stream 192.168.2.254:88 (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705111: Received answer (1249 bytes) from stream 192.168.2.254:88 (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705112: Terminating TCP connection to stream 192.168.2.254:88 (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705113: Response was from master KDC (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705114: Processing preauth types: 19 (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705115: Selected etype info: etype aes256-cts, salt "FS.LANhostdc.fs.lan", params "" (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705116: Produced preauth for next request: (empty) (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705117: AS key determined by preauth: aes256-cts/711F (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705118: Decrypted AS reply; session key is: aes256-cts/C043 (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705119: FAST negotiation: available (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [ldap_child_get_tgt_sync] (0x2000): credentials initialized (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [ldap_child_get_tgt_sync] (0x2000): keytab ccname: [FILE:/var/lib/sss/db/ccache_FS.LAN_xwkivR] (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705120: Initializing FILE:/var/lib/sss/db/ccache_FS.LAN_xwkivR with default princ host/dc.fs....@fs.lan (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [sss_child_krb5_trace_cb] (0x4000): [9264] 1532249636.705121: Storing host/dc.fs....@fs.lan -> krbtgt/fs....@fs.lan in FILE:/var/lib/sss/db/ccache_FS.LAN_xwkivR (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [ldap_child_get_tgt_sync] (0x2000): credentials stored (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [ldap_child_get_tgt_sync] (0x2000): Got KDC time offset (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [ldap_child_get_tgt_sync] (0x2000): Renaming [/var/lib/sss/db/ccache_FS.LAN_xwkivR] to [/var/lib/sss/db/ccache_FS.LAN] (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [unique_filename_destructor] (0x2000): Unlinking [/var/lib/sss/db/ccache_FS.LAN_xwkivR] (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [unlink_dbg] (0x2000): File already removed: [/var/lib/sss/db/ccache_FS.LAN_xwkivR] (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [prepare_response] (0x0400): Building response for result [0] (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [pack_buffer] (0x2000): response size: 54 (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [pack_buffer] (0x1000): result [0] krberr [0] msgsize [34] msg [FILE:/var/lib/sss/db/ccache_FS.LAN] (Sun Jul 22 15:53:56 2018) [[sssd[ldap_child[9264]]]] [main] (0x0400): ldap_child completed successfully (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [main] (0x0400): ldap_child started. (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [main] (0x2000): context initialized (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [unpack_buffer] (0x1000): total buffer size: 87 (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [unpack_buffer] (0x1000): realm_str size: 16 (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [unpack_buffer] (0x1000): got realm_str: START-LINE.LOCAL (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [unpack_buffer] (0x1000): princ_str size: 3 (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [unpack_buffer] (0x1000): got princ_str: FS$ (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [unpack_buffer] (0x1000): keytab_name size: 44 (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [unpack_buffer] (0x1000): got keytab_name: /var/lib/sss/keytabs/start-line.local.keytab (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [unpack_buffer] (0x1000): lifetime: 86400 (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [unpack_buffer] (0x0200): Will run as [0][0]. (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [privileged_krb5_setup] (0x2000): Kerberos context initialized (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [main] (0x2000): Kerberos context initialized (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [become_user] (0x0200): Trying to become user [0][0]. (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [become_user] (0x0200): Already user [0]. (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [main] (0x2000): Running as [0][0]. (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [main] (0x2000): getting TGT sync (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [ldap_child_get_tgt_sync] (0x2000): got realm_name: [START-LINE.LOCAL] (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [ldap_child_get_tgt_sync] (0x0100): Principal name is: [FS$@START-LINE.LOCAL] (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [ldap_child_get_tgt_sync] (0x0100): Using keytab [MEMORY:/var/lib/sss/keytabs/start-line.local.keytab] (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56920: Getting initial credentials for FS$@START-LINE.LOCAL (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56921: Looked up etypes in keytab: aes256-cts, aes128-cts, rc4-hmac (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56923: Sending request (179 bytes) to START-LINE.LOCAL (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56924: Resolving hostname ad.start-line.local. (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56925: Resolving hostname ad2.start-line.local. (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56926: Resolving hostname ad.start-line.local. (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56927: Initiating TCP connection to stream 192.168.2.10:88 (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56928: Sending TCP request to stream 192.168.2.10:88 (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56929: Received answer (200 bytes) from stream 192.168.2.10:88 (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56930: Terminating TCP connection to stream 192.168.2.10:88 (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56931: Response was not from master KDC (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56932: Received error from KDC: -1765328359/Additional pre-authentication required (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56935: Processing preauth types: 16, 15, 19, 2 (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56936: Selected etype info: etype aes256-cts, salt "START-LINE.LOCALkrbtgtFS", params "" (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56937: PKINIT client has no configured identity; giving up (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56938: PKINIT client has no configured identity; giving up (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56939: Preauth module pkinit (16) (real) returned: 22/Invalid argument (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56940: PKINIT client has no configured identity; giving up (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56941: Preauth module pkinit (14) (real) returned: 22/Invalid argument (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56942: Retrieving FS$@START-LINE.LOCAL from MEMORY:/var/lib/sss/keytabs/start-line.local.keytab (vno 0, enctype aes256-cts) with result: 0/Success (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56943: AS key obtained for encrypted timestamp: aes256-cts/302E (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56945: Encrypted timestamp (for 1532249659.638281): plain 301AA011180F32303138303732323038353431395AA105020309BD49, encrypted A3CA8B31D9ACAE5B543C4583399DFB8C83D1353F7E22C392B4B2246B1CE31063FB4FC6AB89547AE8E5BFE4604208746FC8890C4413D67DBD (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56946: Preauth module encrypted_timestamp (2) (real) returned: 0/Success (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56947: Produced preauth for next request: 2 (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56948: Sending request (257 bytes) to START-LINE.LOCAL (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56949: Resolving hostname ad.start-line.local. (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56950: Resolving hostname ad2.start-line.local. (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56951: Resolving hostname ad2.start-line.local. (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56952: Initiating TCP connection to stream 192.168.2.4:88 (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56953: Sending TCP request to stream 192.168.2.4:88 (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56954: Received answer (1509 bytes) from stream 192.168.2.4:88 (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56955: Terminating TCP connection to stream 192.168.2.4:88 (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56956: Response was not from master KDC (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56957: Processing preauth types: 19 (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56958: Selected etype info: etype aes256-cts, salt "START-LINE.LOCALkrbtgtFS", params "" (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56959: Produced preauth for next request: (empty) (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56960: AS key determined by preauth: aes256-cts/302E (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56961: Decrypted AS reply; session key is: aes256-cts/35F5 (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56962: FAST negotiation: unavailable (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [ldap_child_get_tgt_sync] (0x2000): credentials initialized (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [ldap_child_get_tgt_sync] (0x2000): keytab ccname: [FILE:/var/lib/sss/db/ccache_START-LINE.LOCAL_zncMrc] (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56963: Initializing FILE:/var/lib/sss/db/ccache_START-LINE.LOCAL_zncMrc with default princ FS$@START-LINE.LOCAL (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [sss_child_krb5_trace_cb] (0x4000): [9278] 1532249659.56964: Storing FS$@START-LINE.LOCAL -> krbtgt/START-LINE.LOCAL@START-LINE.LOCAL in FILE:/var/lib/sss/db/ccache_START-LINE.LOCAL_zncMrc (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [ldap_child_get_tgt_sync] (0x2000): credentials stored (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [ldap_child_get_tgt_sync] (0x2000): Got KDC time offset (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [ldap_child_get_tgt_sync] (0x2000): Renaming [/var/lib/sss/db/ccache_START-LINE.LOCAL_zncMrc] to [/var/lib/sss/db/ccache_START-LINE.LOCAL] (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [unique_filename_destructor] (0x2000): Unlinking [/var/lib/sss/db/ccache_START-LINE.LOCAL_zncMrc] (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [unlink_dbg] (0x2000): File already removed: [/var/lib/sss/db/ccache_START-LINE.LOCAL_zncMrc] (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [prepare_response] (0x0400): Building response for result [0] (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [pack_buffer] (0x2000): response size: 64 (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [pack_buffer] (0x1000): result [0] krberr [0] msgsize [44] msg [FILE:/var/lib/sss/db/ccache_START-LINE.LOCAL] (Sun Jul 22 15:54:19 2018) [[sssd[ldap_child[9278]]]] [main] (0x0400): ldap_child completed successfully (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [main] (0x0400): ldap_child started. (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [main] (0x2000): context initialized (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [unpack_buffer] (0x1000): total buffer size: 87 (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [unpack_buffer] (0x1000): realm_str size: 16 (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [unpack_buffer] (0x1000): got realm_str: START-LINE.LOCAL (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [unpack_buffer] (0x1000): princ_str size: 3 (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [unpack_buffer] (0x1000): got princ_str: FS$ (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [unpack_buffer] (0x1000): keytab_name size: 44 (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [unpack_buffer] (0x1000): got keytab_name: /var/lib/sss/keytabs/start-line.local.keytab (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [unpack_buffer] (0x1000): lifetime: 86400 (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [unpack_buffer] (0x0200): Will run as [0][0]. (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [privileged_krb5_setup] (0x2000): Kerberos context initialized (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [main] (0x2000): Kerberos context initialized (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [become_user] (0x0200): Trying to become user [0][0]. (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [become_user] (0x0200): Already user [0]. (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [main] (0x2000): Running as [0][0]. (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [main] (0x2000): getting TGT sync (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [ldap_child_get_tgt_sync] (0x2000): got realm_name: [START-LINE.LOCAL] (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [ldap_child_get_tgt_sync] (0x0100): Principal name is: [FS$@START-LINE.LOCAL] (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [ldap_child_get_tgt_sync] (0x0100): Using keytab [MEMORY:/var/lib/sss/keytabs/start-line.local.keytab] (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238960: Getting initial credentials for FS$@START-LINE.LOCAL (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238961: Looked up etypes in keytab: aes256-cts, aes128-cts, rc4-hmac (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238963: Sending request (179 bytes) to START-LINE.LOCAL (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238964: Resolving hostname ad2.start-line.local. (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238965: Resolving hostname ad.start-line.local. (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238966: Resolving hostname ad2.start-line.local. (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238967: Initiating TCP connection to stream 192.168.2.4:88 (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238968: Sending TCP request to stream 192.168.2.4:88 (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238969: Received answer (200 bytes) from stream 192.168.2.4:88 (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238970: Terminating TCP connection to stream 192.168.2.4:88 (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238971: Response was not from master KDC (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238972: Received error from KDC: -1765328359/Additional pre-authentication required (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238975: Processing preauth types: 16, 15, 19, 2 (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238976: Selected etype info: etype aes256-cts, salt "START-LINE.LOCALkrbtgtFS", params "" (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238977: PKINIT client has no configured identity; giving up (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238978: PKINIT client has no configured identity; giving up (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238979: Preauth module pkinit (16) (real) returned: 22/Invalid argument (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238980: PKINIT client has no configured identity; giving up (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238981: Preauth module pkinit (14) (real) returned: 22/Invalid argument (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238982: Retrieving FS$@START-LINE.LOCAL from MEMORY:/var/lib/sss/keytabs/start-line.local.keytab (vno 0, enctype aes256-cts) with result: 0/Success (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238983: AS key obtained for encrypted timestamp: aes256-cts/302E (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238985: Encrypted timestamp (for 1532250457.808984): plain 301AA011180F32303138303732323039303733375AA10502030C5818, encrypted 24C5E69CED86F1B4D9DBC2A218AEC76C9E2BF566FFDA7B0654D6466BB10689B819DC075E80A2DF5AC3F9891F47AE4DA6C03F00420C0BA0E5 (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238986: Preauth module encrypted_timestamp (2) (real) returned: 0/Success (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238987: Produced preauth for next request: 2 (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238988: Sending request (257 bytes) to START-LINE.LOCAL (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238989: Resolving hostname ad2.start-line.local. (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238990: Resolving hostname ad.start-line.local. (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238991: Resolving hostname ad.start-line.local. (Sun Jul 22 16:07:37 2018) [[sssd[ldap_child[9680]]]] [sss_child_krb5_trace_cb] (0x4000): [9680] 1532250457.238992: Initiating TCP connection to stream 192.168.2.10:88
_______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahosted.org/message/XFHBZQS74ZSDWITJODWDPEU7XAZTYCAO/
