Clients credentials have been revoked while getting initial credentials

little_fish · Created Mar 24, 2020 06:34:42

Dear Lucas,

Maybe the user is locked if it consecutively enters five incorrect passwords within 5 minutes for accessing the KDC server.

Wait for 5 minutes. Run the kinit command again.
If the error message persists after 5 minutes, check whether LOCKED_OUT exists in the /var/log/Bigdata/kerberos/krb5kdc.log log on the two Kerberos nodes.
If LOCKED_OUT exists, a process frequently logs in to KDC using incorrect passwords. In the preceding information, 192.168.117. specifies the IP address accessed by the client. Stop the client on the node. Wait for 5 minutes and run the kinit command.

Thanks.

little_fish · Created Mar 24, 2020 06:34:42

Dear Lucas,

Maybe the user is locked if it consecutively enters five incorrect passwords within 5 minutes for accessing the KDC server.

Wait for 5 minutes. Run the kinit command again.
If the error message persists after 5 minutes, check whether LOCKED_OUT exists in the /var/log/Bigdata/kerberos/krb5kdc.log log on the two Kerberos nodes.
If LOCKED_OUT exists, a process frequently logs in to KDC using incorrect passwords. In the preceding information, 192.168.117. specifies the IP address accessed by the client. Stop the client on the node. Wait for 5 minutes and run the kinit command.

Thanks.