[Freeipa-users] Re: Users can login only sometimes with a IPA-AD trust

[Sumit Bose via FreeIPA-users]

Am Wed, Jan 04, 2023 at 01:23:53PM -0300 schrieb tizo:
> >
> > Hi,
> >
> > 'Decrypt integrity check failed' typically means that the wrong
> > Kerberos password or key was used. Since you are using FAST it might
> > either be the user password the user is typing in or the host key which
> > was used to setup the FAST tunnel. Was the host key updated shortly
> > before the issue happened?
> >
> > Can you add 'debug_level = 9' to the [domain/...] section of sssd.conf,
> > restart SSSD and waiting until the issue occurs again? With this
> > debug_level a details Kerberos trace should be in krb5_child.log which
> > might help to identify with specific operation fails.
> >
> > bye,
> > Sumit
> >
> 
> Sumit,
> 
> I am quite sure that the user password is right, as I have tried in
> both clients several times in a row, copying and pasting it. The
> client that works always works, the other sometimes works. The client
> that sometimes works is new, so the host key was recently created. I
> have also tried uninstalling ipa in the client, and deleting the host
> from IPA, but the problem was always present.
> 
> I have added the debug line to sssd.conf, and I am sending
> krb5_child.log with one failed login (at 13:19) and one working login
> (at 13:20) with the same user, as the problem is very easy to
> reproduce.

Hi,

it looks like if the client is talking to 10.2.100.11 it is
working as expected but with 10.12.100.1 it fails. Are there any details
in the logs of those servers?

bye,
Sumit


> 
> Thanks very much.

> (2023-01-04 13:19:02): [krb5_child[4908]] [main] (0x0400): [RID#5] krb5_child 
> started.
> (2023-01-04 13:19:02): [krb5_child[4908]] [unpack_buffer] (0x1000): [RID#5] 
> total buffer size: [162]
> (2023-01-04 13:19:02): [krb5_child[4908]] [unpack_buffer] (0x0100): [RID#5] 
> cmd [241 (auth)] uid [700000003] gid [700000005] validate [true] enterprise 
> principal [false] offline [false] UPN [mduff...@smb.fnr.gub.uy]
> (2023-01-04 13:19:02): [krb5_child[4908]] [unpack_buffer] (0x0100): [RID#5] 
> ccname: [KEYRING:persistent:700000003] old_ccname: 
> [KEYRING:persistent:700000003] keytab: [/etc/krb5.keytab]
> (2023-01-04 13:19:02): [krb5_child[4908]] [switch_creds] (0x0200): [RID#5] 
> Switch user to [700000003][700000005].
> (2023-01-04 13:19:02): [krb5_child[4908]] [sss_krb5_cc_verify_ccache] 
> (0x2000): [RID#5] TGT not found or expired.
> (2023-01-04 13:19:02): [krb5_child[4908]] [switch_creds] (0x0200): [RID#5] 
> Switch user to [0][0].
> (2023-01-04 13:19:02): [krb5_child[4908]] [k5c_check_old_ccache] (0x4000): 
> [RID#5] Ccache_file is [KEYRING:persistent:700000003] and is not active and 
> TGT is  valid.
> (2023-01-04 13:19:02): [krb5_child[4908]] [k5c_precreate_ccache] (0x4000): 
> [RID#5] Recreating ccache
> (2023-01-04 13:19:02): [krb5_child[4908]] [k5c_setup_fast] (0x0100): [RID#5] 
> Fast principal is set to [host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy]
> (2023-01-04 13:19:02): [krb5_child[4908]] [find_principal_in_keytab] 
> (0x4000): [RID#5] Trying to find principal 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy in keytab.
> (2023-01-04 13:19:02): [krb5_child[4908]] [match_principal] (0x1000): [RID#5] 
> Principal matched to the sample 
> (host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy).
> (2023-01-04 13:19:02): [krb5_child[4908]] [check_fast_ccache] (0x0200): 
> [RID#5] FAST TGT is still valid.
> (2023-01-04 13:19:03): [krb5_child[4908]] [privileged_krb5_setup] (0x0080): 
> [RID#5] Cannot open the PAC responder socket
> (2023-01-04 13:19:03): [krb5_child[4908]] [become_user] (0x0200): [RID#5] 
> Trying to become user [700000003][700000005].
> (2023-01-04 13:19:03): [krb5_child[4908]] [main] (0x2000): [RID#5] Running as 
> [700000003][700000005].
> (2023-01-04 13:19:03): [krb5_child[4908]] [set_lifetime_options] (0x0100): 
> [RID#5] No specific renewable lifetime requested.
> (2023-01-04 13:19:03): [krb5_child[4908]] [set_lifetime_options] (0x0100): 
> [RID#5] No specific lifetime requested.
> (2023-01-04 13:19:03): [krb5_child[4908]] [set_canonicalize_option] (0x0100): 
> [RID#5] Canonicalization is set to [true]
> (2023-01-04 13:19:03): [krb5_child[4908]] [main] (0x0400): [RID#5] Will 
> perform auth
> (2023-01-04 13:19:03): [krb5_child[4908]] [main] (0x0400): [RID#5] Will 
> perform online auth
> (2023-01-04 13:19:03): [krb5_child[4908]] [tgt_req_child] (0x1000): [RID#5] 
> Attempting to get a TGT
> (2023-01-04 13:19:03): [krb5_child[4908]] [get_and_save_tgt] (0x0400): 
> [RID#5] Attempting kinit for realm [SMB.FNR.GUB.UY]
> (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849143.938451: Getting initial credentials for 
> mduff...@smb.fnr.gub.uy
> 
> (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849143.938452: Error loading plugin module pkinit: 
> 2/unable to find plugin 
> [/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/pkinit.so]: No such file or 
> directory
> 
> (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849143.938453: FAST armor ccache: 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
> 
> (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849143.938454: Retrieving 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krb5_ccache_conf_data/fast_avail/krbtgt\/SMB.FNR.GUB.UY\@SMB.FNR.GUB.UY@X-CACHECONF:
>  from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 
> -1765328243/Matching credential not found
> 
> (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849143.938456: Sending unauthenticated request
> 
> (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849143.938457: Sending request (192 bytes) to 
> SMB.FNR.GUB.UY
> 
> (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849143.938458: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849143.938459: No URI records found
> 
> (2023-01-04 13:19:03): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849143.938460: Sending DNS SRV query for 
> _kerberos._udp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015791: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015792: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015793: Sending DNS SRV query for 
> _kerberos._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015794: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015795: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015796: Resolving hostname samba01.smb.fnr.gub.uy.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015797: Resolving hostname samba02.smb.fnr.gub.uy.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015798: Resolving hostname samba02.smb.fnr.gub.uy.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015799: Initiating TCP connection to stream 
> 10.12.100.1:88
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015800: Sending TCP request to stream 10.12.100.1:88
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015801: Received answer (319 bytes) from stream 
> 10.12.100.1:88
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015802: Terminating TCP connection to stream 
> 10.12.100.1:88
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015803: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015804: No URI records found
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015805: Sending DNS SRV query for 
> _kerberos-master._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015806: No SRV records found
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015807: Response was not from primary KDC
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015808: Received error from KDC: 
> -1765328359/Additional pre-authentication required
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015809: Upgrading to FAST due to presence of 
> PA_FX_FAST in reply
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015810: FAST armor ccache: 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015811: Retrieving 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krb5_ccache_conf_data/fast_avail/krbtgt\/SMB.FNR.GUB.UY\@SMB.FNR.GUB.UY@X-CACHECONF:
>  from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 
> -1765328243/Matching credential not found
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015812: Getting credentials 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy using ccache 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015813: Retrieving 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krb5_ccache_conf_data/start_realm@X-CACHECONF: from 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 
> -1765328243/Matching credential not found
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015814: Retrieving 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy from 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 
> -1765328243/Matching credential not found
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015815: Retrieving 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy from 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 
> -1765328243/Matching credential not found
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015816: Retrieving 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/idm.fnr.gub...@idm.fnr.gub.uy from 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 0/Success
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015817: Starting with TGT for client realm: 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/idm.fnr.gub...@idm.fnr.gub.uy
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015818: Retrieving 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy from 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 
> -1765328243/Matching credential not found
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015819: Requesting TGT 
> krbtgt/smb.fnr.gub...@idm.fnr.gub.uy using TGT 
> krbtgt/idm.fnr.gub...@idm.fnr.gub.uy
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015820: Generated subkey for TGS request: 
> aes256-cts/6E38
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015821: etypes requested in TGS request: 
> aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, 
> camellia128-cts, camellia256-cts
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015823: Encoding request body and padata into FAST 
> request
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015824: Sending request (2175 bytes) to 
> IDM.FNR.GUB.UY
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015825: Initiating TCP connection to stream 
> 10.12.100.2:88
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015826: Sending TCP request to stream 10.12.100.2:88
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015827: Received answer (2087 bytes) from stream 
> 10.12.100.2:88
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015828: Terminating TCP connection to stream 
> 10.12.100.2:88
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015829: Response was from primary KDC
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015830: Decoding FAST response
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015831: FAST reply key: aes256-cts/05ED
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015832: TGS reply is for 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@idm.fnr.gub.uy with session key aes256-cts/7394
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015833: TGS request result: 0/Success
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015834: Received TGT for SMB.FNR.GUB.UY; advancing 
> current realm
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015835: Retrieving 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy from 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 
> -1765328243/Matching credential not found
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015836: Requesting TGT 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy using TGT 
> krbtgt/smb.fnr.gub...@idm.fnr.gub.uy
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015837: Generated subkey for TGS request: 
> aes256-cts/E345
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015838: etypes requested in TGS request: 
> aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, 
> camellia128-cts, camellia256-cts
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015840: Encoding request body and padata into FAST 
> request
> G
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015841: Sending request (2139 bytes) to 
> SMB.FNR.GUB.UY
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015842: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015843: No URI records found
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015844: Sending DNS SRV query for 
> _kerberos._udp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015845: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015846: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015847: Sending DNS SRV query for 
> _kerberos._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015848: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015849: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015850: Resolving hostname samba02.smb.fnr.gub.uy.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015851: Resolving hostname samba01.smb.fnr.gub.uy.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015852: Resolving hostname samba01.smb.fnr.gub.uy.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015853: Initiating TCP connection to stream 
> 10.2.100.11:88
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015854: Sending TCP request to stream 10.2.100.11:88
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015855: Received answer (1979 bytes) from stream 
> 10.2.100.11:88
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015856: Terminating TCP connection to stream 
> 10.2.100.11:88
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015857: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015858: No URI records found
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015859: Sending DNS SRV query for 
> _kerberos-master._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015860: No SRV records found
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015861: Response was not from primary KDC
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015862: Decoding FAST response
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015863: FAST reply key: aes256-cts/FAF7
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015864: TGS reply is for 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy with session key aes256-cts/5531
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015865: TGS request result: 0/Success
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015866: Storing 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy in 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015867: Received TGT for service realm: 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015868: Requesting tickets for 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy, referrals on
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015869: Generated subkey for TGS request: 
> aes256-cts/CC16
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015870: etypes requested in TGS request: 
> aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, 
> camellia128-cts, camellia256-cts
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015872: Encoding request body and padata into FAST 
> request
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015873: Sending request (2031 bytes) to 
> SMB.FNR.GUB.UY
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015874: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015875: No URI records found
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015876: Sending DNS SRV query for 
> _kerberos._udp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015877: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015878: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015879: Sending DNS SRV query for 
> _kerberos._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015880: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015881: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015882: Resolving hostname samba01.smb.fnr.gub.uy.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015883: Resolving hostname samba02.smb.fnr.gub.uy.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015884: Resolving hostname samba02.smb.fnr.gub.uy.
> 
> (2023-01-04 13:19:04): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849144.015885: Initiating TCP connection to stream 
> 10.12.100.1:88
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132204: Sending TCP request to stream 10.12.100.1:88
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132205: Received answer (2003 bytes) from stream 
> 10.12.100.1:88
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132206: Terminating TCP connection to stream 
> 10.12.100.1:88
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132207: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132208: No URI records found
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132209: Sending DNS SRV query for 
> _kerberos-master._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132210: No SRV records found
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132211: Response was not from primary KDC
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132212: Decoding FAST response
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132213: FAST reply key: aes256-cts/CFDC
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132214: TGS reply is for 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy with session key aes256-cts/0E8E
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132215: TGS request result: 0/Success
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132216: Received creds for desired service 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132217: Storing 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy in 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132218: Armor ccache sesion key: aes256-cts/0E8E
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132220: Creating authenticator for 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy, seqnum 0, subkey aes256-cts/CB80, 
> session key aes256-cts/0E8E
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132222: FAST armor key: aes256-cts/6F88
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132224: Sending unauthenticated request
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132225: Encoding request body and padata into FAST 
> request
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132226: Sending request (2090 bytes) to 
> SMB.FNR.GUB.UY
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132227: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132228: No URI records found
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132229: Sending DNS SRV query for 
> _kerberos._udp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132230: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132231: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132232: Sending DNS SRV query for 
> _kerberos._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132233: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132234: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132235: Resolving hostname samba01.smb.fnr.gub.uy.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132236: Resolving hostname samba02.smb.fnr.gub.uy.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132237: Resolving hostname samba01.smb.fnr.gub.uy.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132238: Initiating TCP connection to stream 
> 10.2.100.11:88
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132239: Sending TCP request to stream 10.2.100.11:88
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132240: Received answer (676 bytes) from stream 
> 10.2.100.11:88
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132241: Terminating TCP connection to stream 
> 10.2.100.11:88
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132242: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132243: No URI records found
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132244: Sending DNS SRV query for 
> _kerberos-master._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132245: No SRV records found
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132246: Response was not from primary KDC
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132247: Received error from KDC: 
> -1765328359/Additional pre-authentication required
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132248: Decoding FAST response
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132251: Preauthenticating using KDC method data
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132252: Processing preauth types: PA-PK-AS-REQ 
> (16), PA-PK-AS-REP_OLD (15), PA-PKINIT-KX (147), PA-ENCRYPTED-CHALLENGE 
> (138), PA-FX-FAST (136), 655, PA-ETYPE-INFO2 (19), PA-FX-COOKIE (133), 
> PA-FX-ERROR (137)
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132253: Selected etype info: etype aes256-cts, salt 
> "SMB.FNR.GUB.UYmduffour", params "\x00\x00\x10\x00"
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132254: Received cookie: 
> 0S\xa0\x06\x0c\x04H5L1\xa1I0G\xa0\x03\x02\x01\x12\xa2@\x04>\xa90\x81k~Js*\xdd\xe1\xda^\x8c\xe1{s\xe0O\xe7\xf7\x86
>  
> >\xf5\x17*\x9c\xf2L*\xa2\xaeB{\x00\xa0\xee\xdd\xde\x84\xb3\xc5\x99&S\xab\xaf\xbd|\x89\x19x_Ko?\x86\x14(*\x9f\xba
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_krb5_responder] (0x4000): 
> [RID#5] Got question [password].
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132256: Preauth module encrypted_challenge (138) 
> (real) returned: 0/Success
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132257: Produced preauth for next request: 
> PA-FX-COOKIE (133), PA-ENCRYPTED-CHALLENGE (138)
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132258: Encoding request body and padata into FAST 
> request
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132259: Sending request (2273 bytes) to 
> SMB.FNR.GUB.UY
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132260: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132261: No URI records found
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132262: Sending DNS SRV query for 
> _kerberos._udp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132263: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132264: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132265: Sending DNS SRV query for 
> _kerberos._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132266: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132267: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132268: Resolving hostname samba02.smb.fnr.gub.uy.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132269: Resolving hostname samba01.smb.fnr.gub.uy.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132270: Resolving hostname samba02.smb.fnr.gub.uy.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132271: Initiating TCP connection to stream 
> 10.12.100.1:88
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132272: Sending TCP request to stream 10.12.100.1:88
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132273: Received answer (373 bytes) from stream 
> 10.12.100.1:88
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132274: Terminating TCP connection to stream 
> 10.12.100.1:88
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132275: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132276: No URI records found
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132277: Sending DNS SRV query for 
> _kerberos-master._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132278: No SRV records found
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132279: Response was not from primary KDC
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132280: Received error from KDC: 
> -1765328353/Decrypt integrity check failed
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132281: Decoding FAST response
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132283: Recovering from KDC error 31 using preauth 
> mech PA-ENCRYPTED-CHALLENGE (138)
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132284: Preauth tryagain input types (138): 
> PA-FX-COOKIE (133), PA-FX-ERROR (137)
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132285: Preauth module encrypted_challenge (138) 
> tryagain returned: 0/Success
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132286: Retrying AS request with primary KDC
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132287: Getting initial credentials for 
> mduff...@smb.fnr.gub.uy
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132288: FAST armor ccache: 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132289: Retrieving 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krb5_ccache_conf_data/fast_avail/krbtgt\/SMB.FNR.GUB.UY\@SMB.FNR.GUB.UY@X-CACHECONF:
>  from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 
> -1765328243/Matching credential not found
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132291: Sending unauthenticated request
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132292: Sending request (192 bytes) to 
> SMB.FNR.GUB.UY (primary)
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132293: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132294: No URI records found
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132295: Sending DNS SRV query for 
> _kerberos-master._udp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132296: Sending DNS SRV query for 
> _kerberos-master._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#5] [4908] 1672849145.132297: No SRV records found
> 
> (2023-01-04 13:19:05): [krb5_child[4908]] [get_and_save_tgt] (0x0020): 
> [RID#5] 1725: [-1765328353][Decrypt integrity check failed]
> (2023-01-04 13:19:05): [krb5_child[4908]] [map_krb5_error] (0x0020): [RID#5] 
> 1854: [-1765328353][Decrypt integrity check failed]
> (2023-01-04 13:19:05): [krb5_child[4908]] [k5c_send_data] (0x0200): [RID#5] 
> Received error code 1432158227
> (2023-01-04 13:19:05): [krb5_child[4908]] [pack_response_packet] (0x2000): 
> [RID#5] response packet size: [4]
> (2023-01-04 13:19:05): [krb5_child[4908]] [k5c_send_data] (0x4000): [RID#5] 
> Response sent.
> (2023-01-04 13:19:05): [krb5_child[4908]] [main] (0x0400): [RID#5] krb5_child 
> completed successfully
> (2023-01-04 13:20:09): [krb5_child[4947]] [main] (0x0400): [RID#7] krb5_child 
> started.
> (2023-01-04 13:20:09): [krb5_child[4947]] [unpack_buffer] (0x1000): [RID#7] 
> total buffer size: [162]
> (2023-01-04 13:20:09): [krb5_child[4947]] [unpack_buffer] (0x0100): [RID#7] 
> cmd [241 (auth)] uid [700000003] gid [700000005] validate [true] enterprise 
> principal [false] offline [false] UPN [mduff...@smb.fnr.gub.uy]
> (2023-01-04 13:20:09): [krb5_child[4947]] [unpack_buffer] (0x0100): [RID#7] 
> ccname: [KEYRING:persistent:700000003] old_ccname: 
> [KEYRING:persistent:700000003] keytab: [/etc/krb5.keytab]
> (2023-01-04 13:20:09): [krb5_child[4947]] [switch_creds] (0x0200): [RID#7] 
> Switch user to [700000003][700000005].
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_krb5_cc_verify_ccache] 
> (0x2000): [RID#7] TGT not found or expired.
> (2023-01-04 13:20:09): [krb5_child[4947]] [switch_creds] (0x0200): [RID#7] 
> Switch user to [0][0].
> (2023-01-04 13:20:09): [krb5_child[4947]] [k5c_check_old_ccache] (0x4000): 
> [RID#7] Ccache_file is [KEYRING:persistent:700000003] and is not active and 
> TGT is  valid.
> (2023-01-04 13:20:09): [krb5_child[4947]] [k5c_precreate_ccache] (0x4000): 
> [RID#7] Recreating ccache
> (2023-01-04 13:20:09): [krb5_child[4947]] [k5c_setup_fast] (0x0100): [RID#7] 
> Fast principal is set to [host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy]
> (2023-01-04 13:20:09): [krb5_child[4947]] [find_principal_in_keytab] 
> (0x4000): [RID#7] Trying to find principal 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy in keytab.
> (2023-01-04 13:20:09): [krb5_child[4947]] [match_principal] (0x1000): [RID#7] 
> Principal matched to the sample 
> (host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy).
> (2023-01-04 13:20:09): [krb5_child[4947]] [check_fast_ccache] (0x0200): 
> [RID#7] FAST TGT is still valid.
> (2023-01-04 13:20:09): [krb5_child[4947]] [privileged_krb5_setup] (0x0080): 
> [RID#7] Cannot open the PAC responder socket
> (2023-01-04 13:20:09): [krb5_child[4947]] [become_user] (0x0200): [RID#7] 
> Trying to become user [700000003][700000005].
> (2023-01-04 13:20:09): [krb5_child[4947]] [main] (0x2000): [RID#7] Running as 
> [700000003][700000005].
> (2023-01-04 13:20:09): [krb5_child[4947]] [set_lifetime_options] (0x0100): 
> [RID#7] No specific renewable lifetime requested.
> (2023-01-04 13:20:09): [krb5_child[4947]] [set_lifetime_options] (0x0100): 
> [RID#7] No specific lifetime requested.
> (2023-01-04 13:20:09): [krb5_child[4947]] [set_canonicalize_option] (0x0100): 
> [RID#7] Canonicalization is set to [true]
> (2023-01-04 13:20:09): [krb5_child[4947]] [main] (0x0400): [RID#7] Will 
> perform auth
> (2023-01-04 13:20:09): [krb5_child[4947]] [main] (0x0400): [RID#7] Will 
> perform online auth
> (2023-01-04 13:20:09): [krb5_child[4947]] [tgt_req_child] (0x1000): [RID#7] 
> Attempting to get a TGT
> (2023-01-04 13:20:09): [krb5_child[4947]] [get_and_save_tgt] (0x0400): 
> [RID#7] Attempting kinit for realm [SMB.FNR.GUB.UY]
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814719: Getting initial credentials for 
> mduff...@smb.fnr.gub.uy
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814720: Error loading plugin module pkinit: 
> 2/unable to find plugin 
> [/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/pkinit.so]: No such file or 
> directory
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814721: FAST armor ccache: 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814722: Retrieving 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krb5_ccache_conf_data/fast_avail/krbtgt\/SMB.FNR.GUB.UY\@SMB.FNR.GUB.UY@X-CACHECONF:
>  from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 
> -1765328243/Matching credential not found
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814724: Sending unauthenticated request
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814725: Sending request (192 bytes) to 
> SMB.FNR.GUB.UY
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814726: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814727: No URI records found
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814728: Sending DNS SRV query for 
> _kerberos._udp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814729: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814730: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814731: Sending DNS SRV query for 
> _kerberos._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814732: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814733: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814734: Resolving hostname samba01.smb.fnr.gub.uy.
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814735: Resolving hostname samba02.smb.fnr.gub.uy.
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814736: Resolving hostname samba02.smb.fnr.gub.uy.
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814737: Initiating TCP connection to stream 
> 10.12.100.1:88
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814738: Sending TCP request to stream 10.12.100.1:88
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814739: Received answer (319 bytes) from stream 
> 10.12.100.1:88
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814740: Terminating TCP connection to stream 
> 10.12.100.1:88
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814741: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814742: No URI records found
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814743: Sending DNS SRV query for 
> _kerberos-master._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814744: No SRV records found
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814745: Response was not from primary KDC
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814746: Received error from KDC: 
> -1765328359/Additional pre-authentication required
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814747: Upgrading to FAST due to presence of 
> PA_FX_FAST in reply
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814748: FAST armor ccache: 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814749: Retrieving 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krb5_ccache_conf_data/fast_avail/krbtgt\/SMB.FNR.GUB.UY\@SMB.FNR.GUB.UY@X-CACHECONF:
>  from MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 
> -1765328243/Matching credential not found
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814750: Getting credentials 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy using ccache 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814751: Retrieving 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krb5_ccache_conf_data/start_realm@X-CACHECONF: from 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 
> -1765328243/Matching credential not found
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814752: Retrieving 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy from 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 
> -1765328243/Matching credential not found
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814753: Retrieving 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy from 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 
> -1765328243/Matching credential not found
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814754: Retrieving 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/idm.fnr.gub...@idm.fnr.gub.uy from 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 0/Success
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814755: Starting with TGT for client realm: 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/idm.fnr.gub...@idm.fnr.gub.uy
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814756: Retrieving 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy from 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 
> -1765328243/Matching credential not found
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814757: Requesting TGT 
> krbtgt/smb.fnr.gub...@idm.fnr.gub.uy using TGT 
> krbtgt/idm.fnr.gub...@idm.fnr.gub.uy
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814758: Generated subkey for TGS request: 
> aes256-cts/AD9C
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814759: etypes requested in TGS request: 
> aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, 
> camellia128-cts, camellia256-cts
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814761: Encoding request body and padata into FAST 
> request
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814762: Sending request (2178 bytes) to 
> IDM.FNR.GUB.UY
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814763: Initiating TCP connection to stream 
> 10.2.100.13:88
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814764: Sending TCP request to stream 10.2.100.13:88
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814765: Received answer (2089 bytes) from stream 
> 10.2.100.13:88
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814766: Terminating TCP connection to stream 
> 10.2.100.13:88
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814767: Response was from primary KDC
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814768: Decoding FAST response
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814769: FAST reply key: aes256-cts/CB51
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814770: TGS reply is for 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@idm.fnr.gub.uy with session key aes256-cts/27BE
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814771: TGS request result: 0/Success
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814772: Received TGT for SMB.FNR.GUB.UY; advancing 
> current realm
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814773: Retrieving 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy from 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY with result: 
> -1765328243/Matching credential not found
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814774: Requesting TGT 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy using TGT 
> krbtgt/smb.fnr.gub...@idm.fnr.gub.uy
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814775: Generated subkey for TGS request: 
> aes256-cts/542B
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814776: etypes requested in TGS request: 
> aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, 
> camellia128-cts, camellia256-cts
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814778: Encoding request body and padata into FAST 
> request
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814779: Sending request (2140 bytes) to 
> SMB.FNR.GUB.UY
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814780: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814781: No URI records found
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814782: Sending DNS SRV query for 
> _kerberos._udp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814783: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814784: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814785: Sending DNS SRV query for 
> _kerberos._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814786: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814787: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814788: Resolving hostname samba01.smb.fnr.gub.uy.
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814789: Resolving hostname samba02.smb.fnr.gub.uy.
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814790: Resolving hostname samba02.smb.fnr.gub.uy.
> 
> (2023-01-04 13:20:09): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849209.814791: Initiating TCP connection to stream 
> 10.12.100.1:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007134: Sending TCP request to stream 10.12.100.1:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007135: Received answer (1979 bytes) from stream 
> 10.12.100.1:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007136: Terminating TCP connection to stream 
> 10.12.100.1:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007137: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007138: No URI records found
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007139: Sending DNS SRV query for 
> _kerberos-master._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007140: No SRV records found
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007141: Response was not from primary KDC
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007142: Decoding FAST response
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007143: FAST reply key: aes256-cts/C7D2
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007144: TGS reply is for 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy with session key aes256-cts/4D87
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007145: TGS request result: 0/Success
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007146: Storing 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy in 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007147: Received TGT for service realm: 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007148: Requesting tickets for 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy, referrals on
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007149: Generated subkey for TGS request: 
> aes256-cts/8B4A
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007150: etypes requested in TGS request: 
> aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, 
> camellia128-cts, camellia256-cts
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007152: Encoding request body and padata into FAST 
> request
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007153: Sending request (2031 bytes) to 
> SMB.FNR.GUB.UY
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007154: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007155: No URI records found
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007156: Sending DNS SRV query for 
> _kerberos._udp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007157: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007158: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007159: Sending DNS SRV query for 
> _kerberos._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007160: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007161: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007162: Resolving hostname samba01.smb.fnr.gub.uy.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007163: Resolving hostname samba02.smb.fnr.gub.uy.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007164: Resolving hostname samba01.smb.fnr.gub.uy.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007165: Initiating TCP connection to stream 
> 10.2.100.11:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007166: Sending TCP request to stream 10.2.100.11:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007167: Received answer (2003 bytes) from stream 
> 10.2.100.11:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007168: Terminating TCP connection to stream 
> 10.2.100.11:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007169: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007170: No URI records found
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007171: Sending DNS SRV query for 
> _kerberos-master._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007172: No SRV records found
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007173: Response was not from primary KDC
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007174: Decoding FAST response
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007175: FAST reply key: aes256-cts/E6AF
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007176: TGS reply is for 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy with session key aes256-cts/4E13
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007177: TGS request result: 0/Success
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007178: Received creds for desired service 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007179: Storing 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy in 
> MEMORY:/var/lib/sss/db/fast_ccache_IDM.FNR.GUB.UY
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007180: Armor ccache sesion key: aes256-cts/4E13
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007182: Creating authenticator for 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy, seqnum 0, subkey aes256-cts/63B9, 
> session key aes256-cts/4E13
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007184: FAST armor key: aes256-cts/D363
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007186: Sending unauthenticated request
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007187: Encoding request body and padata into FAST 
> request
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007188: Sending request (2089 bytes) to 
> SMB.FNR.GUB.UY
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007189: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007190: No URI records found
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007191: Sending DNS SRV query for 
> _kerberos._udp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007192: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007193: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007194: Sending DNS SRV query for 
> _kerberos._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007195: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007196: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007197: Resolving hostname samba01.smb.fnr.gub.uy.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007198: Resolving hostname samba02.smb.fnr.gub.uy.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007199: Resolving hostname samba01.smb.fnr.gub.uy.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007200: Initiating TCP connection to stream 
> 10.2.100.11:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007201: Sending TCP request to stream 10.2.100.11:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007202: Received answer (676 bytes) from stream 
> 10.2.100.11:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007203: Terminating TCP connection to stream 
> 10.2.100.11:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007204: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007205: No URI records found
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007206: Sending DNS SRV query for 
> _kerberos-master._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007207: No SRV records found
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007208: Response was not from primary KDC
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007209: Received error from KDC: 
> -1765328359/Additional pre-authentication required
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007210: Decoding FAST response
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007213: Preauthenticating using KDC method data
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007214: Processing preauth types: PA-PK-AS-REQ 
> (16), PA-PK-AS-REP_OLD (15), PA-PKINIT-KX (147), PA-ENCRYPTED-CHALLENGE 
> (138), PA-FX-FAST (136), 655, PA-ETYPE-INFO2 (19), PA-FX-COOKIE (133), 
> PA-FX-ERROR (137)
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007215: Selected etype info: etype aes256-cts, salt 
> "SMB.FNR.GUB.UYmduffour", params "\x00\x00\x10\x00"
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007216: Received cookie: 
> 0S\xa0\x06\x0c\x04H5L1\xa1I0G\xa0\x03\x02\x01\x12\xa2@\x04>\xa5\xa4r\xfeV\x8f\xeb\xf7i\x92\xc0\xf0\xe6\xda&\xf9\x81m\xa9s&)\x15,\xc4\x953D\xb24\x8d\xd2\x94\xbb\xbb\xbf\x08*U\xb0K\x7f\xc2IF\xf4\x88\xd2\xd3\xfdY\x80d\xd0\xdf\xd9\xee\x9e\x0b7h'
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_krb5_responder] (0x4000): 
> [RID#7] Got question [password].
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007218: Preauth module encrypted_challenge (138) 
> (real) returned: 0/Success
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007219: Produced preauth for next request: 
> PA-FX-COOKIE (133), PA-ENCRYPTED-CHALLENGE (138)
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007220: Encoding request body and padata into FAST 
> request
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007221: Sending request (2272 bytes) to 
> SMB.FNR.GUB.UY
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007222: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007223: No URI records found
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007224: Sending DNS SRV query for 
> _kerberos._udp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007225: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007226: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007227: Sending DNS SRV query for 
> _kerberos._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007228: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007229: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007230: Resolving hostname samba02.smb.fnr.gub.uy.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007231: Resolving hostname samba01.smb.fnr.gub.uy.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007232: Resolving hostname samba01.smb.fnr.gub.uy.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007233: Initiating TCP connection to stream 
> 10.2.100.11:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007234: Sending TCP request to stream 10.2.100.11:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007235: Received answer (1954 bytes) from stream 
> 10.2.100.11:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007236: Terminating TCP connection to stream 
> 10.2.100.11:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007237: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007238: No URI records found
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007239: Sending DNS SRV query for 
> _kerberos-master._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007240: No SRV records found
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007241: Response was not from primary KDC
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007242: Decoding FAST response
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007243: Processing preauth types: 
> PA-ENCRYPTED-CHALLENGE (138), PA-ETYPE-INFO2 (19)
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007244: Selected etype info: etype aes256-cts, salt 
> "SMB.FNR.GUB.UYmduffour", params "\x00\x00\x10\x00"
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007245: Preauth module encrypted_challenge (138) 
> (real) returned: 0/Success
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007246: Produced preauth for next request: (empty)
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007247: AS key determined by preauth: 
> aes256-cts/486D
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007248: FAST reply key: aes256-cts/E923
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007249: Decrypted AS reply; session key is: 
> aes256-cts/7B52
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007250: FAST negotiation: available
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_krb5_expire_callback_func] 
> (0x2000): [RID#7] exp_time: [10270225]
> (2023-01-04 13:20:10): [krb5_child[4947]] [validate_tgt] (0x2000): [RID#7] 
> Keytab entry with the realm of the credential not found in keytab. Using the 
> last entry.
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007251: Retrieving 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy from MEMORY:/etc/krb5.keytab 
> (vno 0, enctype 0) with result: 0/Success
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007252: Resolving unique ccache of type MEMORY
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007253: Initializing MEMORY:azeA6F5 with default 
> princ mduff...@smb.fnr.gub.uy
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007254: Storing mduff...@smb.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy in MEMORY:azeA6F5
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007255: Getting credentials mduff...@smb.fnr.gub.uy 
> -> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy using ccache MEMORY:azeA6F5
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007256: Retrieving mduff...@smb.fnr.gub.uy -> 
> krb5_ccache_conf_data/start_realm@X-CACHECONF: from MEMORY:azeA6F5 with 
> result: -1765328243/Matching credential not found
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007257: Retrieving mduff...@smb.fnr.gub.uy -> 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy from MEMORY:azeA6F5 with 
> result: -1765328243/Matching credential not found
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007258: Retrieving mduff...@smb.fnr.gub.uy -> 
> krbtgt/idm.fnr.gub...@idm.fnr.gub.uy from MEMORY:azeA6F5 with result: 
> -1765328243/Matching credential not found
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007259: Retrieving mduff...@smb.fnr.gub.uy -> 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy from MEMORY:azeA6F5 with result: 
> 0/Success
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007260: Starting with TGT for client realm: 
> mduff...@smb.fnr.gub.uy -> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007261: Retrieving mduff...@smb.fnr.gub.uy -> 
> krbtgt/idm.fnr.gub...@idm.fnr.gub.uy from MEMORY:azeA6F5 with result: 
> -1765328243/Matching credential not found
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007262: Requesting TGT 
> krbtgt/idm.fnr.gub...@smb.fnr.gub.uy using TGT 
> krbtgt/smb.fnr.gub...@smb.fnr.gub.uy
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007263: Generated subkey for TGS request: 
> aes256-cts/4D40
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007264: etypes requested in TGS request: 
> aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, 
> camellia128-cts, camellia256-cts
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007266: Encoding request body and padata into FAST 
> request
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007267: Sending request (1785 bytes) to 
> SMB.FNR.GUB.UY
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007268: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007269: No URI records found
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007270: Sending DNS SRV query for 
> _kerberos._udp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007271: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007272: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007273: Sending DNS SRV query for 
> _kerberos._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007274: SRV answer: 0 100 88 
> "samba02.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007275: SRV answer: 0 100 88 
> "samba01.smb.fnr.gub.uy."
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007276: Resolving hostname samba02.smb.fnr.gub.uy.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007277: Resolving hostname samba01.smb.fnr.gub.uy.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007278: Resolving hostname samba02.smb.fnr.gub.uy.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007279: Initiating TCP connection to stream 
> 10.12.100.1:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007280: Sending TCP request to stream 10.12.100.1:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007281: Received answer (1747 bytes) from stream 
> 10.12.100.1:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007282: Terminating TCP connection to stream 
> 10.12.100.1:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007283: Sending DNS URI query for 
> _kerberos.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007284: No URI records found
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007285: Sending DNS SRV query for 
> _kerberos-master._tcp.SMB.FNR.GUB.UY.
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007286: No SRV records found
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007287: Response was not from primary KDC
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007288: Decoding FAST response
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007289: FAST reply key: aes256-cts/60C7
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007290: TGS reply is for mduff...@smb.fnr.gub.uy -> 
> krbtgt/idm.fnr.gub...@smb.fnr.gub.uy with session key aes256-cts/FF01
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007291: TGS request result: 0/Success
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007292: Storing mduff...@smb.fnr.gub.uy -> 
> krbtgt/idm.fnr.gub...@smb.fnr.gub.uy in MEMORY:azeA6F5
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007293: Received TGT for service realm: 
> krbtgt/idm.fnr.gub...@smb.fnr.gub.uy
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007294: Requesting tickets for 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy, referrals on
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007295: Generated subkey for TGS request: 
> aes256-cts/DE5B
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007296: etypes requested in TGS request: 
> aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, 
> camellia128-cts, camellia256-cts
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007298: Encoding request body and padata into FAST 
> request
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007299: Sending request (1821 bytes) to 
> IDM.FNR.GUB.UY
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007300: Initiating TCP connection to stream 
> 10.2.100.13:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007301: Sending TCP request to stream 10.2.100.13:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007302: Received answer (1837 bytes) from stream 
> 10.2.100.13:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007303: Terminating TCP connection to stream 
> 10.2.100.13:88
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007304: Response was from primary KDC
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007305: Decoding FAST response
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007306: FAST reply key: aes256-cts/B4B2
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007307: TGS reply is for mduff...@smb.fnr.gub.uy -> 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy with session key aes256-cts/AA94
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007308: TGS request result: 0/Success
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007309: Received creds for desired service 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007310: Storing mduff...@smb.fnr.gub.uy -> 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy in MEMORY:azeA6F5
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007311: Creating authenticator for 
> mduff...@smb.fnr.gub.uy -> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy, 
> seqnum 0, subkey (null), session key aes256-cts/AA94
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007313: Retrieving 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy from MEMORY:/etc/krb5.keytab 
> (vno 3, enctype aes256-cts) with result: 0/Success
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007314: Decrypted AP-REQ with specified server 
> principal host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy: aes256-cts/3099
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007315: AP-REQ ticket: mduff...@smb.fnr.gub.uy -> 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy, session key aes256-cts/AA94
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007316: Negotiated enctype based on authenticator: 
> aes256-cts
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007317: Initializing MEMORY:rd_req2 with default 
> princ mduff...@smb.fnr.gub.uy
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007318: Storing mduff...@smb.fnr.gub.uy -> 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy in MEMORY:rd_req2
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007319: Storing mduff...@smb.fnr.gub.uy -> 
> krbtgt/idm.fnr.gub...@smb.fnr.gub.uy in MEMORY:rd_req2
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007320: Destroying ccache MEMORY:azeA6F5
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [validate_tgt] (0x0400): [RID#7] 
> TGT verified using key for [host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy].
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007321: Retrieving mduff...@smb.fnr.gub.uy -> 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy from MEMORY:rd_req2 with 
> result: 0/Success
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007322: Retrieving 
> host/laptingw02.idm.fnr.gub...@idm.fnr.gub.uy from MEMORY:/etc/krb5.keytab 
> (vno 3, enctype aes256-cts) with result: 0/Success
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_send_pac] (0x0080): [RID#7] 
> failed to contact PAC responder
> (2023-01-04 13:20:10): [krb5_child[4947]] [validate_tgt] (0x0040): [RID#7] 
> sss_send_pac failed, group membership for user with principal 
> [mduff...@smb.fnr.gub.uy] might not be correct.
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_child_krb5_trace_cb] (0x4000): 
> [RID#7] [4947] 1672849210.007323: Destroying ccache MEMORY:rd_req2
> 
> (2023-01-04 13:20:10): [krb5_child[4947]] [get_and_save_tgt] (0x2000): 
> [RID#7] Running as [700000003][700000005].
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_get_ccache_name_for_principal] 
> (0x4000): [RID#7] Location: [KEYRING:persistent:700000003]
> (2023-01-04 13:20:10): [krb5_child[4947]] [sss_get_ccache_name_for_principal] 
> (0x4000): [RID#7] tmp_ccname: 
> [KEYRING:persistent:700000003:krb_ccache_17Y700s]
> (2023-01-04 13:20:10): [krb5_child[4947]] [create_ccache] (0x4000): [RID#7] 
> Initializing ccache of type [KEYRING]
> (2023-01-04 13:20:10): [krb5_child[4947]] [create_ccache] (0x4000): [RID#7] 
> CC supports switch
> (2023-01-04 13:20:10): [krb5_child[4947]] [create_ccache] (0x4000): [RID#7] 
> returning: 0
> (2023-01-04 13:20:10): [krb5_child[4947]] [safe_remove_old_ccache_file] 
> (0x0400): [RID#7] New and old ccache file are the same, none will be deleted.
> (2023-01-04 13:20:10): [krb5_child[4947]] [k5c_send_data] (0x0200): [RID#7] 
> Received error code 0
> (2023-01-04 13:20:10): [krb5_child[4947]] [pack_response_packet] (0x2000): 
> [RID#7] response packet size: [140]
> (2023-01-04 13:20:10): [krb5_child[4947]] [k5c_send_data] (0x4000): [RID#7] 
> Response sent.
> (2023-01-04 13:20:10): [krb5_child[4947]] [main] (0x0400): [RID#7] krb5_child 
> completed successfully
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue