(2022-12-16 13:35:33): [krb5_child[2403]] [get_and_save_tgt] (0x0020): [RID#14] 2008: [-1765328174][Pre-authentication failed: Preauthentication failed] ********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING BACKTRACE: * (2022-12-16 13:35:33): [krb5_child[2403]] [main] (0x0400): [RID#14] krb5_child started. * (2022-12-16 13:35:33): [krb5_child[2403]] [unpack_buffer] (0x1000): [RID#14] total buffer size: [257] * (2022-12-16 13:35:33): [krb5_child[2403]] [unpack_buffer] (0x0100): [RID#14] cmd [241 (auth)] uid [114001120] gid [114000513] validate [false] enterprise principal [false] offline [false] UPN [adminbob@AUTHENTICATE.ME.UK] * (2022-12-16 13:35:33): [krb5_child[2403]] [unpack_buffer] (0x2000): [RID#14] No old ccache * (2022-12-16 13:35:33): [krb5_child[2403]] [unpack_buffer] (0x0100): [RID#14] ccname: [FILE:/tmp/krb5cc_114001120] old_ccname: [not set] keytab: [/etc/krb5.keytab] * (2022-12-16 13:35:33): [krb5_child[2403]] [check_use_fast] (0x0100): [RID#14] Not using FAST. * (2022-12-16 13:35:33): [krb5_child[2403]] [k5c_precreate_ccache] (0x4000): [RID#14] Recreating ccache * (2022-12-16 13:35:33): [krb5_child[2403]] [switch_creds] (0x0200): [RID#14] Switch user to [0][0]. * (2022-12-16 13:35:33): [krb5_child[2403]] [switch_creds] (0x0200): [RID#14] Already user [0]. * (2022-12-16 13:35:33): [krb5_child[2403]] [main] (0x2000): [RID#14] Running as [0][0]. * (2022-12-16 13:35:33): [krb5_child[2403]] [set_lifetime_options] (0x0100): [RID#14] No specific renewable lifetime requested. * (2022-12-16 13:35:33): [krb5_child[2403]] [set_lifetime_options] (0x0100): [RID#14] No specific lifetime requested. * (2022-12-16 13:35:33): [krb5_child[2403]] [set_canonicalize_option] (0x0100): [RID#14] Canonicalization is set to [false] * (2022-12-16 13:35:33): [krb5_child[2403]] [main] (0x0400): [RID#14] Will perform auth * (2022-12-16 13:35:33): [krb5_child[2403]] [main] (0x0400): [RID#14] Will perform online auth * (2022-12-16 13:35:33): [krb5_child[2403]] [tgt_req_child] (0x1000): [RID#14] Attempting to get a TGT * (2022-12-16 13:35:33): [krb5_child[2403]] [get_and_save_tgt] (0x4000): [RID#14] Found Smartcard credentials, trying pkinit. * (2022-12-16 13:35:33): [krb5_child[2403]] [get_pkinit_identity] (0x4000): [RID#14] Got [Admin Bob Diffie][/usr/lib/x86_64-linux-gnu/pkcs11/opensc-pkcs11.so]. * (2022-12-16 13:35:33): [krb5_child[2403]] [get_pkinit_identity] (0x4000): [RID#14] Using pkinit identity [PKCS11:module_name=/usr/lib/x86_64-linux-gnu/pkcs11/opensc-pkcs11.so:token=Admin Bob Diffie:certid=01:certlabel=Certificate for PIV Authentication]. * (2022-12-16 13:35:33): [krb5_child[2403]] [get_and_save_tgt] (0x0400): [RID#14] Attempting kinit for realm [AUTHENTICATE.ME.UK] * (2022-12-16 13:35:33): [krb5_child[2403]] [sss_krb5_responder] (0x4000): [RID#14] Got question [pkinit]. * (2022-12-16 13:35:33): [krb5_child[2403]] [answer_pkinit] (0x4000): [RID#14] [0] Identity [PKCS11:module_name=/usr/lib/x86_64-linux-gnu/pkcs11/opensc-pkcs11.so:slotid=0:token=Admin Bob Diffie] flags [0]. * (2022-12-16 13:35:33): [krb5_child[2403]] [answer_pkinit] (0x4000): [RID#14] Setting pkinit_prompting. * (2022-12-16 13:35:33): [krb5_child[2403]] [pkinit_identity_matches] (0x4000): [RID#14] Found [module_name=/usr/lib/x86_64-linux-gnu/pkcs11/opensc-pkcs11.so] in identity [PKCS11:module_name=/usr/lib/x86_64-linux-gnu/pkcs11/opensc-pkcs11.so:slotid=0:token=Admin Bob Diffie]. * (2022-12-16 13:35:33): [krb5_child[2403]] [pkinit_identity_matches] (0x4000): [RID#14] Found [token=Admin Bob Diffie] in identity [PKCS11:module_name=/usr/lib/x86_64-linux-gnu/pkcs11/opensc-pkcs11.so:slotid=0:token=Admin Bob Diffie]. * (2022-12-16 13:35:33): [krb5_child[2403]] [sss_krb5_prompter] (0x4000): [RID#14] sss_krb5_prompter name [(null)] banner [(null)] num_prompts [1] EINVAL. * (2022-12-16 13:35:33): [krb5_child[2403]] [sss_krb5_prompter] (0x4000): [RID#14] Prompt [0][Password for adminbob@AUTHENTICATE.ME.UK]. * (2022-12-16 13:35:33): [krb5_child[2403]] [sss_krb5_prompter] (0x0200): [RID#14] Prompter interface isn't used for password prompts by SSSD. * (2022-12-16 13:35:33): [krb5_child[2403]] [get_and_save_tgt] (0x0020): [RID#14] 2008: [-1765328174][Pre-authentication failed: Preauthentication failed] ********************** BACKTRACE DUMP ENDS HERE ********************************* (2022-12-16 13:35:33): [krb5_child[2403]] [map_krb5_error] (0x0020): [RID#14] 2137: [-1765328174][Pre-authentication failed: Preauthentication failed]