Bret Wortman via FreeIPA-users <freeipa-users@lists.fedorahosted.org>
writes:

> # kinit admin
> kint: Client's credentials have been revoked while getting initial
> credentials
>
> Then while looking at /var/log/httpd/error_log:
>
> [date] [:error] [pid] [remote 192.168.1.50:96] Database Error: Server
> is unwilling to perform: Too many failed logins.
>
> What the? How can my admin account be getting locked?

Do you have an IPA client exposed to the internet?  Drive-by test logins
often try admin and yould lock you out.  You should filter the users
with sssd.  Add this to your /etc/sss/sssd.conf and restart sssd:

[nss]
filter_users = root, admin

Jochen

-- 
This space is intentionally left blank.
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

Reply via email to