Access Keys:
Skip to content (Access Key - 0)

Q: Error -1765328366 - Clients credentials have been revoked

When trying to get MIT kerberos tickets or get a MIT web certificate you may get an error message:

(-1765328366, 'Clients credentials have been revoked')

Answer

This means that the person's MIT account is not allowed to get kerberos tickets, which also blocks the account from getting web certificates.

This most commonly happens if someone has left MIT and their account is deactivated, but it can also happen for other reasons (such as if the account was blocked to stop a spammer from using it).

Solution: if you are an MIT affiliate, contact the IS&T Service Desk and give your MIT username, the error message, and say where you saw the error message.

Contact the IS&T Service Desk for assistance.

For IS&T Helpstaff

The technical details is that the person's kerberos principal has been modified in the KDC.
Toggling the "active" state of an account in Moira will trigger an incremental update that automatically toggles the DISALLOW_ALL_TIX setting, and also someone with kadmin access can toggle the setting manually with
kadmin: modprinc +allow_tix username

IS&T Contributions

Documentation and information provided by IS&T staff members


Last Modified:

March 30, 2020

Get Help

Request help
from the Help Desk
Report a security incident
to the Security Team
Labels:
c-kerberos c-kerberos Delete
Enter labels to add to this page:
Please wait 
Looking for a label? Just start typing.
Feedback
This product/service is:
Easy to use
Average
Difficult to use

This article is:
Helpful
Inaccurate
Obsolete
Adaptavist Theme Builder (4.2.3) Powered by Atlassian Confluence 3.5.13, the Enterprise Wiki