Skip to content

Instantly share code, notes, and snippets.

@elkoniu
Created June 4, 2020 16:01
Show Gist options
  • Save elkoniu/ec37e08c5a9bd79765daf4747ef0bf03 to your computer and use it in GitHub Desktop.
Save elkoniu/ec37e08c5a9bd79765daf4747ef0bf03 to your computer and use it in GitHub Desktop.
(2020-06-04 16:00:44): [krb5_child[843648]] [main] (0x0400): krb5_child started.
(2020-06-04 16:00:44): [krb5_child[843648]] [unpack_buffer] (0x1000): total buffer size: [124]
(2020-06-04 16:00:44): [krb5_child[843648]] [unpack_buffer] (0x0100): cmd [241] uid [316600005] gid [316600005] validate [false] enterprise principal [false] offline [false] UPN [kucyk2@IPA.VM]
(2020-06-04 16:00:44): [krb5_child[843648]] [unpack_buffer] (0x0100): ccname: [KCM:] old_ccname: [KCM:] keytab: [/shared/enrollment/client/ipa.keytab]
(2020-06-04 16:00:44): [krb5_child[843648]] [check_use_fast] (0x0100): Not using FAST.
(2020-06-04 16:00:44): [krb5_child[843648]] [switch_creds] (0x0200): Switch user to [316600005][316600005].
(2020-06-04 16:00:44): [krb5_child[843648]] [switch_creds] (0x0200): Switch user to [0][0].
(2020-06-04 16:00:44): [krb5_child[843648]] [k5c_check_old_ccache] (0x4000): Ccache_file is [KCM:] and is not active and TGT is valid.
(2020-06-04 16:00:44): [krb5_child[843648]] [k5c_precreate_ccache] (0x4000): Recreating ccache
(2020-06-04 16:00:44): [krb5_child[843648]] [become_user] (0x0200): Trying to become user [316600005][316600005].
(2020-06-04 16:00:44): [krb5_child[843648]] [main] (0x2000): Running as [316600005][316600005].
(2020-06-04 16:00:44): [krb5_child[843648]] [set_lifetime_options] (0x0100): No specific renewable lifetime requested.
(2020-06-04 16:00:44): [krb5_child[843648]] [set_lifetime_options] (0x0100): No specific lifetime requested.
(2020-06-04 16:00:44): [krb5_child[843648]] [set_canonicalize_option] (0x0100): Canonicalization is set to [false]
(2020-06-04 16:00:44): [krb5_child[843648]] [main] (0x0400): Will perform online auth
(2020-06-04 16:00:44): [krb5_child[843648]] [tgt_req_child] (0x1000): Attempting to get a TGT
(2020-06-04 16:00:44): [krb5_child[843648]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [IPA.VM]
(2020-06-04 16:00:44): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286444.581442: Getting initial credentials for kucyk2@IPA.VM
(2020-06-04 16:00:44): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286444.581444: Sending unauthenticated request
(2020-06-04 16:00:44): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286444.581445: Sending request (169 bytes) to IPA.VM
(2020-06-04 16:00:44): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286444.581446: Sending initial UDP request to dgram 192.168.121.250:88
(2020-06-04 16:00:45): [krb5_child[843649]] [main] (0x0400): krb5_child started.
(2020-06-04 16:00:45): [krb5_child[843649]] [unpack_buffer] (0x1000): total buffer size: [123]
(2020-06-04 16:00:45): [krb5_child[843649]] [unpack_buffer] (0x0100): cmd [241] uid [316600004] gid [316600004] validate [false] enterprise principal [false] offline [false] UPN [kucyk@IPA.VM]
(2020-06-04 16:00:45): [krb5_child[843649]] [unpack_buffer] (0x0100): ccname: [KCM:] old_ccname: [KCM:] keytab: [/shared/enrollment/client/ipa.keytab]
(2020-06-04 16:00:45): [krb5_child[843649]] [check_use_fast] (0x0100): Not using FAST.
(2020-06-04 16:00:45): [krb5_child[843649]] [switch_creds] (0x0200): Switch user to [316600004][316600004].
(2020-06-04 16:00:45): [krb5_child[843649]] [switch_creds] (0x0200): Switch user to [0][0].
(2020-06-04 16:00:45): [krb5_child[843649]] [k5c_check_old_ccache] (0x4000): Ccache_file is [KCM:] and is not active and TGT is valid.
(2020-06-04 16:00:45): [krb5_child[843649]] [k5c_precreate_ccache] (0x4000): Recreating ccache
(2020-06-04 16:00:45): [krb5_child[843649]] [become_user] (0x0200): Trying to become user [316600004][316600004].
(2020-06-04 16:00:45): [krb5_child[843649]] [main] (0x2000): Running as [316600004][316600004].
(2020-06-04 16:00:45): [krb5_child[843649]] [set_lifetime_options] (0x0100): No specific renewable lifetime requested.
(2020-06-04 16:00:45): [krb5_child[843649]] [set_lifetime_options] (0x0100): No specific lifetime requested.
(2020-06-04 16:00:45): [krb5_child[843649]] [set_canonicalize_option] (0x0100): Canonicalization is set to [false]
(2020-06-04 16:00:45): [krb5_child[843649]] [main] (0x0400): Will perform online auth
(2020-06-04 16:00:45): [krb5_child[843649]] [tgt_req_child] (0x1000): Attempting to get a TGT
(2020-06-04 16:00:45): [krb5_child[843649]] [get_and_save_tgt] (0x0400): Attempting kinit for realm [IPA.VM]
(2020-06-04 16:00:45): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286445.245698: Getting initial credentials for kucyk@IPA.VM
(2020-06-04 16:00:45): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286445.245700: Sending unauthenticated request
(2020-06-04 16:00:45): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286445.245701: Sending request (168 bytes) to IPA.VM
(2020-06-04 16:00:45): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286445.245702: Sending initial UDP request to dgram 192.168.121.250:88
(2020-06-04 16:00:46): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286446.663015: Received answer (488 bytes) from dgram 192.168.121.250:88
(2020-06-04 16:00:46): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286446.663016: Response was from master KDC
(2020-06-04 16:00:46): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286446.663017: Received error from KDC: -1765328359/Additional pre-authentication required
(2020-06-04 16:00:46): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286446.663020: Preauthenticating using KDC method data
(2020-06-04 16:00:46): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286446.663021: Processing preauth types: PA-PK-AS-REQ (16), PA-FX-FAST (136), PA-ETYPE-INFO2 (19), PA-PKINIT-KX (147), PA-SPAKE (151), PA-ENC-TIMESTAMP (2), PA_AS_FRESHNESS (150), PA-FX-COOKIE (133)
(2020-06-04 16:00:46): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286446.663022: Selected etype info: etype aes256-cts, salt "<kVDdK0@RV7b-WI)", params ""
(2020-06-04 16:00:46): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286446.663023: Received cookie: MIT1\x00\x00\x00\x01\xf6\xc5?\xc7\x94\xa5\xde\xdbHMM\x00\xf5:\xdf\xa3J\xbb\xdf\xda\xf6\xe6\xe4\xd5\x07\xbe\x13)\x81\xb6t\xb5\xbaCF\xa7\x9d\xd4^At\xc6\x98\xe9\x9cNn\xd8\x96}5d\x99\x7f\xc5A\xba!t\x13\x07\xb2J\x18s\xbc\x9dV\x82\xc8f\xbf#E\xa7y\x83\xb9\xefh\xea\xfes'5\xde\x01>\xa7\xaf\x9f\x89\x02\x1fR&|P\xa5'\xf47@\xc7\xaa\xc7\xfa\xa1\xfekw]a\x90\xc87\x06\x98\x01\xee\xe6\xa4\x0f\xbb\xda\xaf5\xfa\x8f\xc2
(2020-06-04 16:00:46): [krb5_child[843648]] [sss_krb5_responder] (0x4000): Got question [password].
(2020-06-04 16:00:46): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286446.663024: SPAKE challenge received with group 1, pubkey 34954AE9B86E470205C6F69F7827C290CC51F63854424738DE9A99EA88F1ED62
(2020-06-04 16:00:46): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286446.663025: SPAKE key generated with pubkey 89AA16B5D104DD0F9819B2320393DDA5551F31A44EB0C62E588D2486A6207117
(2020-06-04 16:00:46): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286446.666647: Received answer (487 bytes) from dgram 192.168.121.250:88
(2020-06-04 16:00:46): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286446.663026: SPAKE algorithm result: F224FE36668C32DC8D83F37ACECCCCCDBAC66A6812A068FD8AF6C2421BC7DC70
(2020-06-04 16:00:46): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286446.666648: Response was from master KDC
(2020-06-04 16:00:46): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286446.663027: SPAKE final transcript hash: 29EB804807C74CBAB2FF5B05057120A4143E64E6B9773AE8E2B77D4C28798CE5
(2020-06-04 16:00:46): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286446.666649: Received error from KDC: -1765328359/Additional pre-authentication required
(2020-06-04 16:00:46): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286446.666652: Preauthenticating using KDC method data
(2020-06-04 16:00:46): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286446.663028: Sending SPAKE response
(2020-06-04 16:00:46): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286446.666653: Processing preauth types: PA-PK-AS-REQ (16), PA-FX-FAST (136), PA-ETYPE-INFO2 (19), PA-PKINIT-KX (147), PA-SPAKE (151), PA-ENC-TIMESTAMP (2), PA_AS_FRESHNESS (150), PA-FX-COOKIE (133)
(2020-06-04 16:00:46): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286446.663029: Preauth module spake (151) (real) returned: 0/Success
(2020-06-04 16:00:46): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286446.666654: Selected etype info: etype aes256-cts, salt "<wO<,rAdc/FG==CF", params ""
(2020-06-04 16:00:46): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286446.663030: Produced preauth for next request: PA-FX-COOKIE (133), PA-SPAKE (151)
(2020-06-04 16:00:46): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286446.666655: Received cookie: MIT1\x00\x00\x00\x01-\x07\xf0\xb0\xbcf|\xc3\xb0\xa7\xf2\x06\xfc\x9d\xcb\xac\x99R\xc1~\xdb\x1b4\xec\x9f\xca$\xdcq\x9d\x84M\xfb'I\x9eg8\x05\xf1\x1c\xad#[\xeb\xc7\xc0\xa5\xa9\xdb\xd5{\x9e\x1a+g\xa90\xbaX\x1b\x8d\xe6\xca\xed\xf2I@\xb1\xc1\x81\xcd\x18\xd6*\x16\xbf_\xdbVo\x13\x99'T.\xc9\x81\x00?\x10\x00\xe6bF\xa6\x96\x0c8*\x8c\x92\xf4p\x1by\xec5\xc2\x9a\x80d*W\xbe\x13\xdfm\x12p\xc3\x9eH_PZ\x05u"[
(2020-06-04 16:00:46): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286446.663031: Sending request (428 bytes) to IPA.VM
(2020-06-04 16:00:46): [krb5_child[843649]] [sss_krb5_responder] (0x4000): Got question [password].
(2020-06-04 16:00:46): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286446.666656: SPAKE challenge received with group 1, pubkey 0C3695548C5DA1C49470963B1CF4466E67223F6CE2FD3C5FAF53A1EB1AF2D9BB
(2020-06-04 16:00:46): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286446.663032: Sending initial UDP request to dgram 192.168.121.250:88
(2020-06-04 16:00:46): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286446.666657: SPAKE key generated with pubkey BF362D69AB3B695698BF2F2326D39BC1B384DC68D8E85CD910998052AB89F795
(2020-06-04 16:00:46): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286446.666658: SPAKE algorithm result: 08E9C631663CBEA69949EB0ED107DFE8D0D7B78596B7E463F20291B03CD64E8A
(2020-06-04 16:00:46): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286446.666659: SPAKE final transcript hash: F215C77032C46EBA82ACAA9627A40133B35176ACDD1E1B87FDAB25A148076DCC
(2020-06-04 16:00:46): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286446.666660: Sending SPAKE response
(2020-06-04 16:00:46): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286446.666661: Preauth module spake (151) (real) returned: 0/Success
(2020-06-04 16:00:46): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286446.666662: Produced preauth for next request: PA-FX-COOKIE (133), PA-SPAKE (151)
(2020-06-04 16:00:46): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286446.666663: Sending request (427 bytes) to IPA.VM
(2020-06-04 16:00:46): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286446.666664: Sending initial UDP request to dgram 192.168.121.250:88
(2020-06-04 16:00:46): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286446.663033: Received answer (488 bytes) from dgram 192.168.121.250:88
(2020-06-04 16:00:46): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286446.663034: Response was from master KDC
(2020-06-04 16:00:46): [krb5_child[843648]] [sss_child_krb5_trace_cb] (0x4000): [843648] 1591286446.663035: Received error from KDC: -1765328360/Preauthentication failed
(2020-06-04 16:00:46): [krb5_child[843648]] [get_and_save_tgt] (0x0020): 1704: [-1765328360][Preauthentication failed]
(2020-06-04 16:00:46): [krb5_child[843648]] [map_krb5_error] (0x0020): 1833: [-1765328360][Preauthentication failed]
(2020-06-04 16:00:46): [krb5_child[843648]] [k5c_send_data] (0x0200): Received error code 1432158222
(2020-06-04 16:00:46): [krb5_child[843648]] [pack_response_packet] (0x2000): response packet size: [4]
(2020-06-04 16:00:46): [krb5_child[843648]] [k5c_send_data] (0x4000): Response sent.
(2020-06-04 16:00:46): [krb5_child[843648]] [main] (0x0400): krb5_child completed successfully
(2020-06-04 16:00:46): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286446.666665: Received answer (487 bytes) from dgram 192.168.121.250:88
(2020-06-04 16:00:46): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286446.666666: Response was from master KDC
(2020-06-04 16:00:46): [krb5_child[843649]] [sss_child_krb5_trace_cb] (0x4000): [843649] 1591286446.666667: Received error from KDC: -1765328360/Preauthentication failed
(2020-06-04 16:00:46): [krb5_child[843649]] [get_and_save_tgt] (0x0020): 1704: [-1765328360][Preauthentication failed]
(2020-06-04 16:00:46): [krb5_child[843649]] [map_krb5_error] (0x0020): 1833: [-1765328360][Preauthentication failed]
(2020-06-04 16:00:46): [krb5_child[843649]] [k5c_send_data] (0x0200): Received error code 1432158222
(2020-06-04 16:00:46): [krb5_child[843649]] [pack_response_packet] (0x2000): response packet size: [4]
(2020-06-04 16:00:46): [krb5_child[843649]] [k5c_send_data] (0x4000): Response sent.
(2020-06-04 16:00:46): [krb5_child[843649]] [main] (0x0400): krb5_child completed successfully
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment