Error map

Too many authentication failures Received disconnect: Too many authentication failures

Linux · layer 6, Platform & cloud

Open the full error page →

Centre: this error. First ring: errors it is linked with (12). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.

Too many authentication failures — Received disconnect: Too many authentication failures (Linux)Too many au…Setting locale failed — perl: warning: Setting locale failed / bash: warning: setlocale: LC_ALL: cannot change locale (Linux)Setting locale fail…client_loop: send disconnect: Broken pipe — client_loop: send disconnect: Broken pipe (SSH session drops when idle) (Linux)client_loop: send d…IDX20803 — IDX20803: Unable to obtain configuration from: 'https://login.example.com/.well-known/openid-configuration' (.NET)IDX20803publickey — Git: Permission denied (publickey). fatal: Could not read from remote repository. (Git)publickeyIDX10223 — Bearer error="invalid_token": IDX10223: Lifetime validation failed. The token is expired / IDX10501: Signature validation failed (.NET)IDX10223NotAuthorizedException — AWS Cognito: NotAuthorizedException: Incorrect username or password (Authentication)NotAuthorizedExcept…Please run 'az login' — Azure CLI: Please run 'az login' to setup account / No subscription found (Azure)Please run 'az logi…REMOTE HOST IDENTIFICATION HAS CHANGED — WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! (ssh host key changed) (Linux)REMOTE HOST IDENTIF…DefaultAzureCredential failed — DefaultAzureCredential failed to retrieve a token from the included credentials / ManagedIdentityCredential authentication unavailable (Azure)DefaultAzureCredent…auth/invalid-credential — Firebase Auth: auth/invalid-credential (auth/wrong-password, auth/user-not-found, auth/invalid-login-credentials) (Authentication)auth/invalid-creden…UNPROTECTED PRIVATE KEY FILE — WARNING: UNPROTECTED PRIVATE KEY FILE! Permissions 0644 for 'key.pem' are too open (Linux)UNPROTECTED PRIVATE…Could not load the default credentials — Google Cloud: Error: Could not load the default credentials. Browse to https://cloud.google.com/docs/authentication/getting-started (Google Cloud / Firebase)Could not load the …command not found — bash: command not found (Linux)command not foundssh port 22 Connection refused — ssh: connect to host x port 22: Connection refused (Linux)ssh port 22 Connect…ssh port 22 Connection timed out — ssh: connect to host x port 22: Connection timed out (Linux)ssh port 22 Connect…ECONNRESET — Error: socket hang up / read ECONNRESET (API)ECONNRESETport 22 timed out — ssh: connect to host github.com port 22: Connection timed out (Git)port 22 timed outkex_exchange_identification — kex_exchange_identification: Connection closed by remote host (Git)kex_exchange_identi…AADSTS700016 — Azure AD (Entra ID): AADSTS700016 Application not found in the directory (Azure)AADSTS700016401 — HTTP 401 Unauthorized (HTTP)401TokenExpiredError — JWT Expired / Invalid Token (Authentication)TokenExpiredErrornon-fast-forward — Git: ! [rejected] … (fetch first) — error: failed to push some refs (Git)non-fast-forwardnot a git repository — fatal: not a git repository (or any of the parent directories): .git (Git)not a git repositoryEACCES — Linux: Permission denied (Linux)EACCESinvalid_grant — OAuth 2.0 Error: invalid_grant (Authentication)invalid_grantinvalid_api_key — API Error: Invalid API Key / Incorrect API key provided (API)invalid_api_keyAADSTS50076 — Azure AD (Entra ID): AADSTS50076 / AADSTS50079 — multi-factor authentication required (Azure)AADSTS50076Repository not found — remote: Repository not found. fatal: repository 'https://github.com/x/y.git/' not found (Git)Repository not foundAuthentication failed — fatal: Authentication failed for 'https://github.com/x/y.git/' (Git)Authentication fail…password auth removed — remote: Support for password authentication was removed on August 13, 2021. Please use a personal access token instead. (Git)password auth remov…Host key verification failed — Host key verification failed. fatal: Could not read from remote repository. (Git)Host key verificati…workflow scope — ! [remote rejected] … (refusing to allow a Personal Access Token to create or update workflow `.github/workflows/x.yml` without `workflow` scope) (Git)workflow scopeNOAUTH — ReplyError: NOAUTH Authentication required. (Node.js)NOAUTHNO_PUBKEY — The following signatures couldn't be verified because the public key is not available: NO_PUBKEY (Linux)NO_PUBKEYavc: denied — SELinux is preventing ... / avc: denied { read } for pid=... (permission denied despite correct permissions) (Linux)avc: deniedAADSTS50053 — AADSTS50053: Your account is locked (Smart Lockout) / sign-in blocked due to suspicious activity (Azure)AADSTS50053AuthorizationFailed — Azure: AuthorizationFailed — The client does not have authorization to perform action (Azure)AuthorizationFailedE401 — npm ERR! code E401 — Unable to authenticate, need: Basic realm / Incorrect or missing password (npm)E401ENEEDAUTH — npm ERR! code ENEEDAUTH — need auth This command requires you to be logged in (npm)ENEEDAUTHEOTP — npm ERR! code EOTP — This operation requires a one-time password from your authenticator (npm)EOTPECR token expired — denied: Your authorization token has expired. Reauthenticate and try again. (Amazon ECR) (AWS)ECR token expiredUnrecognizedClientException — UnrecognizedClientException: The security token included in the request is invalid (AWS)UnrecognizedClientE…sudoers — user is not in the sudoers file. This incident will be reported. (Linux)sudoersAADSTS65001 — AADSTS65001: The user or administrator has not consented to use the application (Azure)AADSTS65001Key Vault Forbidden — Key Vault: (Forbidden) The user, group or application does not have secrets get permission on key vault (Azure)Key Vault ForbiddenNoCredentialsError — AWS: Unable to locate credentials / Could not load credentials from any providers (AWS)NoCredentialsErrorMissing Authentication Token — {"message":"Missing Authentication Token"} / No authorization token was found (Authentication)Missing Authenticat…invalid_token — invalid_token: The access token is invalid (JsonWebTokenError: invalid signature / jwt malformed) (Authentication)invalid_token

Directly related (12)

Setting locale failedLinux

perl: warning: Setting locale failed / bash: warning: setlocale: LC_ALL: cannot change locale

Your session asks for a locale (often forwarded by SSH from your Mac/PC) that isn’t generated on the server.

client_loop: send disconnect: Broken pipeLinux

client_loop: send disconnect: Broken pipe (SSH session drops when idle)

The SSH connection was cut — usually an idle timeout on a NAT router, firewall or the server, sometimes a network change.

IDX20803.NET

IDX20803: Unable to obtain configuration from: 'https://login.example.com/.well-known/openid-configuration'

The OpenID Connect / JWT bearer middleware couldn’t download the identity provider’s metadata, so it can’t validate tokens or red…

publickeyGit

Git: Permission denied (publickey). fatal: Could not read from remote repository.

SSH authentication to GitHub/GitLab/Bitbucket failed — no key, wrong key, or the key isn’t added to your account.

IDX10223.NET

Bearer error="invalid_token": IDX10223: Lifetime validation failed. The token is expired / IDX10501: Signature validation failed

ASP.NET Core’s JwtBearer middleware rejected the token — expired (IDX10223), signature key not found (IDX10501/IDX10503), or wron…

NotAuthorizedExceptionAuthentication

AWS Cognito: NotAuthorizedException: Incorrect username or password

Cognito rejected the sign-in — wrong credentials, a disabled user, an auth flow not enabled on the app client, or an expired refr…

Please run 'az login'Azure

Azure CLI: Please run 'az login' to setup account / No subscription found

The Azure CLI has no signed-in account (or its token expired), or the account has no subscriptions.

REMOTE HOST IDENTIFICATION HAS CHANGEDLinux

WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! (ssh host key changed)

The server’s SSH host key differs from the one saved in ~/.ssh/known_hosts — usually because the server was rebuilt or the IP was…

DefaultAzureCredential failedAzure

DefaultAzureCredential failed to retrieve a token from the included credentials / ManagedIdentityCredential authentication unavailable

The Azure SDK tried every credential source (env vars, workload identity, managed identity, CLI…) and none worked.

auth/invalid-credentialAuthentication

Firebase Auth: auth/invalid-credential (auth/wrong-password, auth/user-not-found, auth/invalid-login-credentials)

Firebase rejected the email/password sign-in — wrong password, no such user, or a provider credential that’s malformed/expired.

UNPROTECTED PRIVATE KEY FILELinux

WARNING: UNPROTECTED PRIVATE KEY FILE! Permissions 0644 for 'key.pem' are too open

SSH refuses to use a private key that other users can read; it must be readable only by you (chmod 600).

Could not load the default credentialsGoogle Cloud / Firebase

Google Cloud: Error: Could not load the default credentials. Browse to https://cloud.google.com/docs/authentication/getting-started

The Google client library found no Application Default Credentials (ADC) on this machine or environment.

Two steps away (36)

command not foundLinux

bash: command not found

The shell can’t find an executable with that name in any directory on your PATH.

ssh port 22 Connection refusedLinux

ssh: connect to host x port 22: Connection refused

The server answered, but nothing is listening on the SSH port — sshd isn’t running, it uses another port, or a firewall actively…

ssh port 22 Connection timed outLinux

ssh: connect to host x port 22: Connection timed out

SSH packets get no reply — a firewall/security group drops them, the server is off, or the IP is wrong.

ECONNRESETAPI

Error: socket hang up / read ECONNRESET

The other side closed the TCP connection abruptly while your client was still using it.

port 22 timed outGit

ssh: connect to host github.com port 22: Connection timed out

Outbound SSH on port 22 is blocked (firewall, corporate or public Wi-Fi).

kex_exchange_identificationGit

kex_exchange_identification: Connection closed by remote host

The SSH connection was closed before the handshake — server overload, rate limiting, or a proxy/firewall interfering.

AADSTS700016Azure

Azure AD (Entra ID): AADSTS700016 Application not found in the directory

The client ID in your sign-in request doesn’t exist in the tenant you’re authenticating against.

401HTTP

HTTP 401 Unauthorized

The request has no valid authentication credentials — you need to log in or send a valid token.

TokenExpiredErrorAuthentication

JWT Expired / Invalid Token

The JSON Web Token sent with the request is expired, malformed or signed with a different key, so the API rejects it (usually wit…

non-fast-forwardGit

Git: ! [rejected] … (fetch first) — error: failed to push some refs

The remote branch has commits you don’t have locally, so Git refuses to overwrite them. Pull (merge or rebase) first, then push.

not a git repositoryGit

fatal: not a git repository (or any of the parent directories): .git

You ran a Git command outside a Git working tree.

EACCESLinux

Linux: Permission denied

Your user (or the service user) lacks read/write/execute permission on a file, directory or one of its parents.

invalid_grantAuthentication

OAuth 2.0 Error: invalid_grant

The authorization code, refresh token or credentials sent to the token endpoint are invalid, expired, already used or were issued…

invalid_api_keyAPI

API Error: Invalid API Key / Incorrect API key provided

The API didn’t recognise the key sent with the request — it’s wrong, revoked, from another environment, or sent in the wrong plac…

AADSTS50076Azure

Azure AD (Entra ID): AADSTS50076 / AADSTS50079 — multi-factor authentication required

A Conditional Access policy requires MFA, but the sign-in flow (often a script, legacy client or ROPC password grant) can’t compl…

Repository not foundGit

remote: Repository not found. fatal: repository 'https://github.com/x/y.git/' not found

GitHub/GitLab says the repository doesn’t exist — or you lack access to a private repo.

Authentication failedGit

fatal: Authentication failed for 'https://github.com/x/y.git/'

HTTPS authentication to the Git host failed — wrong or expired credentials, or a password used where a token is required.

password auth removedGit

remote: Support for password authentication was removed on August 13, 2021. Please use a personal access token instead.

GitHub no longer accepts account passwords for Git over HTTPS.

Host key verification failedGit

Host key verification failed. fatal: Could not read from remote repository.

SSH doesn’t trust the server’s host key — first connection in a non-interactive environment, or the key changed.

workflow scopeGit

! [remote rejected] … (refusing to allow a Personal Access Token to create or update workflow `.github/workflows/x.yml` without `workflow` scope)

Your token can’t modify GitHub Actions workflow files without the workflow scope.

NOAUTHNode.js

ReplyError: NOAUTH Authentication required.

The Redis server requires a password (or ACL user) but the client didn’t authenticate.

NO_PUBKEYLinux

The following signatures couldn't be verified because the public key is not available: NO_PUBKEY

apt can’t verify a repository’s signature because the repo’s signing key isn’t installed (or has expired/rotated).

avc: deniedLinux

SELinux is preventing ... / avc: denied { read } for pid=... (permission denied despite correct permissions)

SELinux blocked the access — file permissions look fine, but the file’s security context or a boolean doesn’t allow the service t…

AADSTS50053Azure

AADSTS50053: Your account is locked (Smart Lockout) / sign-in blocked due to suspicious activity

Too many failed sign-ins (or sign-ins from a malicious IP) triggered Entra Smart Lockout.

AuthorizationFailedAzure

Azure: AuthorizationFailed — The client does not have authorization to perform action

The signed-in identity (user, service principal or managed identity) lacks an Azure RBAC role for that action on that scope.

E401npm

npm ERR! code E401 — Unable to authenticate, need: Basic realm / Incorrect or missing password

The registry rejected your credentials — missing, expired or wrong auth token.

ENEEDAUTHnpm

npm ERR! code ENEEDAUTH — need auth This command requires you to be logged in

npm needs credentials (publishing, private packages) but none are configured for that registry.

EOTPnpm

npm ERR! code EOTP — This operation requires a one-time password from your authenticator

Your npm account has 2FA for writes and no one-time password was supplied.

ECR token expiredAWS

denied: Your authorization token has expired. Reauthenticate and try again. (Amazon ECR)

Docker’s login to Amazon ECR has expired — ECR tokens last 12 hours, so pushes and pulls fail until you log in again.

UnrecognizedClientExceptionAWS

UnrecognizedClientException: The security token included in the request is invalid

The access key or session token isn’t recognised — wrong/deleted key, a session token missing for temporary credentials, or a reg…

sudoersLinux

user is not in the sudoers file. This incident will be reported.

Your account isn’t allowed to use sudo.

AADSTS65001Azure

AADSTS65001: The user or administrator has not consented to use the application

The app needs permissions that haven’t been granted for this user or tenant.

Key Vault ForbiddenAzure

Key Vault: (Forbidden) The user, group or application does not have secrets get permission on key vault

The caller authenticated but has no permission on the vault — missing access policy or RBAC role, or the vault’s firewall blocks…

NoCredentialsErrorAWS

AWS: Unable to locate credentials / Could not load credentials from any providers

The AWS CLI/SDK found no credentials in any place it looks — env vars, profile files, SSO cache or an instance/task role.

Missing Authentication TokenAuthentication

{"message":"Missing Authentication Token"} / No authorization token was found

The request reached a protected endpoint without credentials — or, on AWS API Gateway, it hit a path/method that doesn’t exist.

invalid_tokenAuthentication

invalid_token: The access token is invalid (JsonWebTokenError: invalid signature / jwt malformed)

A token was sent but the server couldn’t verify it — bad signature, malformed, revoked, or issued for another audience or environ…