What does "Client credentials have been revoked" mean?

Jeremy Allison jra at samba.org
Thu Sep 12 23:44:01 CEST 2013

On Thu, Sep 12, 2013 at 02:22:16PM -0700, Richard Sharpe wrote:
> Hi folks,
> On one system, when joined to AD, after ten minutes or so, we see the following:
> libads/kerberos_util.c:101(ads_kinit_password)
>   kerberos_kinit_password some-machine$@some.domain.some-tld failed:
> Clients credentials have been revoked
> What might be the cause of this? Has anyone here seen it?
> There seems to be lots of questions of this type on the web.

From this page:


 Clients’ credentials have been revoked while getting initial credentials

Application/Function: kinit

Potential Causes and Solution: Can indicate that the user's account is locked or expired (account expired, not password expired).

Hope this helps,


More information about the samba-technical mailing list