Error map

Too many authentication failures Received disconnect: Too many authentication failures

Linux · layer 6, Platform & cloud

Open the full error page →

Centre: this error. First ring: errors it is linked with (12). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.

Too many authentication failures — Received disconnect: Too many authentication failures (Linux)Too many au…IDX10223 — Bearer error="invalid_token": IDX10223: Lifetime validation failed. The token is expired / IDX10501: Signature validation failed (.NET)IDX10223IDX20803 — IDX20803: Unable to obtain configuration from: 'https://login.example.com/.well-known/openid-configuration' (.NET)IDX20803auth/invalid-credential — Firebase Auth: auth/invalid-credential (auth/wrong-password, auth/user-not-found, auth/invalid-login-credentials) (Authentication)auth/invalid-creden…NotAuthorizedException — AWS Cognito: NotAuthorizedException: Incorrect username or password (Authentication)NotAuthorizedExcept…bad auth : Authentication failed — MongoDB: MongoServerError: bad auth : Authentication failed (code 8000 / 18) (MongoDB)bad auth : Authenti…publickey — Git: Permission denied (publickey). fatal: Could not read from remote repository. (Git)publickeyclient_loop: send disconnect: Broken pipe — client_loop: send disconnect: Broken pipe (SSH session drops when idle) (Linux)client_loop: send d…Please run 'az login' — Azure CLI: Please run 'az login' to setup account / No subscription found (Azure)Please run 'az logi…DefaultAzureCredential failed — DefaultAzureCredential failed to retrieve a token from the included credentials / ManagedIdentityCredential authentication unavailable (Azure)DefaultAzureCredent…Host key verification failed — Host key verification failed. fatal: Could not read from remote repository. (Git)Host key verificati…REMOTE HOST IDENTIFICATION HAS CHANGED — WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! (ssh host key changed) (Linux)REMOTE HOST IDENTIF…Authentication token manipulation error — passwd: Authentication token manipulation error (Linux)Authentication toke…AADSTS700016 — Azure AD (Entra ID): AADSTS700016 Application not found in the directory (Azure)AADSTS700016401 — HTTP 401 Unauthorized (HTTP)401TokenExpiredError — JWT Expired / Invalid Token (Authentication)TokenExpiredErrorinvalid_grant — OAuth 2.0 Error: invalid_grant (Authentication)invalid_grantinvalid_api_key — API Error: Invalid API Key / Incorrect API key provided (API)invalid_api_keyAADSTS50076 — Azure AD (Entra ID): AADSTS50076 / AADSTS50079 — multi-factor authentication required (Azure)AADSTS50076Repository not found — remote: Repository not found. fatal: repository 'https://github.com/x/y.git/' not found (Git)Repository not foundAuthentication failed — fatal: Authentication failed for 'https://github.com/x/y.git/' (Git)Authentication fail…password auth removed — remote: Support for password authentication was removed on August 13, 2021. Please use a personal access token instead. (Git)password auth remov…workflow scope — ! [remote rejected] … (refusing to allow a Personal Access Token to create or update workflow `.github/workflows/x.yml` without `workflow` scope) (Git)workflow scopeNOAUTH — ReplyError: NOAUTH Authentication required. (Node.js)NOAUTHE401 — npm ERR! code E401 — Unable to authenticate, need: Basic realm / Incorrect or missing password (npm)E401MongoServerSelectionError — MongooseServerSelectionError: connect ECONNREFUSED 127.0.0.1:27017 (Node.js)MongoServerSelectio…ENEEDAUTH — npm ERR! code ENEEDAUTH — need auth This command requires you to be logged in (npm)ENEEDAUTHEOTP — npm ERR! code EOTP — This operation requires a one-time password from your authenticator (npm)EOTPnon-fast-forward — Git: ! [rejected] … (fetch first) — error: failed to push some refs (Git)non-fast-forwardnot a git repository — fatal: not a git repository (or any of the parent directories): .git (Git)not a git repositoryEACCES — Linux: Permission denied (Linux)EACCESECONNRESET — Error: socket hang up / read ECONNRESET (API)ECONNRESETport 22 timed out — ssh: connect to host github.com port 22: Connection timed out (Git)port 22 timed outkex_exchange_identification — kex_exchange_identification: Connection closed by remote host (Git)kex_exchange_identi…ECR token expired — denied: Your authorization token has expired. Reauthenticate and try again. (Amazon ECR) (AWS)ECR token expiredUnrecognizedClientException — UnrecognizedClientException: The security token included in the request is invalid (AWS)UnrecognizedClientE…pull access denied — pull access denied for image, repository does not exist or may require 'docker login' (Docker)pull access deniedAuthorizationFailed — Azure: AuthorizationFailed — The client does not have authorization to perform action (Azure)AuthorizationFailedunauthorized: authentication required — unauthorized: authentication required (docker push / pull) (Docker)unauthorized: authe…denied — denied: requested access to the resource is denied (docker push) (Docker)deniedMissing Authentication Token — {"message":"Missing Authentication Token"} / No authorization token was found (Authentication)Missing Authenticat…invalid_token — invalid_token: The access token is invalid (JsonWebTokenError: invalid signature / jwt malformed) (Authentication)invalid_tokenAADSTS50126 — AADSTS50126: Error validating credentials due to invalid username or password (Azure)AADSTS50126ssh port 22 Connection refused — ssh: connect to host x port 22: Connection refused (Linux)ssh port 22 Connect…UNPROTECTED PRIVATE KEY FILE — WARNING: UNPROTECTED PRIVATE KEY FILE! Permissions 0644 for 'key.pem' are too open (Linux)UNPROTECTED PRIVATE…NO_PUBKEY — The following signatures couldn't be verified because the public key is not available: NO_PUBKEY (Linux)NO_PUBKEYsudoers — user is not in the sudoers file. This incident will be reported. (Linux)sudoersRead-only file system — Read-only file system (EROFS) — cannot write to disk (Linux)Read-only file syst…Failed to connect to bus — Failed to connect to bus: No such file or directory (systemctl --user / timedatectl) (Linux)Failed to connect t…

Directly related (12)

IDX10223.NET

Bearer error="invalid_token": IDX10223: Lifetime validation failed. The token is expired / IDX10501: Signature validation failed

ASP.NET Core’s JwtBearer middleware rejected the token — expired (IDX10223), signature key not found (IDX10501/IDX10503), or wron…

IDX20803.NET

IDX20803: Unable to obtain configuration from: 'https://login.example.com/.well-known/openid-configuration'

The OpenID Connect / JWT bearer middleware couldn’t download the identity provider’s metadata, so it can’t validate tokens or red…

auth/invalid-credentialAuthentication

Firebase Auth: auth/invalid-credential (auth/wrong-password, auth/user-not-found, auth/invalid-login-credentials)

Firebase rejected the email/password sign-in — wrong password, no such user, or a provider credential that’s malformed/expired.

NotAuthorizedExceptionAuthentication

AWS Cognito: NotAuthorizedException: Incorrect username or password

Cognito rejected the sign-in — wrong credentials, a disabled user, an auth flow not enabled on the app client, or an expired refr…

bad auth : Authentication failedMongoDB

MongoDB: MongoServerError: bad auth : Authentication failed (code 8000 / 18)

MongoDB (often Atlas) rejected the username/password in the connection string.

publickeyGit

Git: Permission denied (publickey). fatal: Could not read from remote repository.

SSH authentication to GitHub/GitLab/Bitbucket failed — no key, wrong key, or the key isn’t added to your account.

client_loop: send disconnect: Broken pipeLinux

client_loop: send disconnect: Broken pipe (SSH session drops when idle)

The SSH connection was cut — usually an idle timeout on a NAT router, firewall or the server, sometimes a network change.

Please run 'az login'Azure

Azure CLI: Please run 'az login' to setup account / No subscription found

The Azure CLI has no signed-in account (or its token expired), or the account has no subscriptions.

DefaultAzureCredential failedAzure

DefaultAzureCredential failed to retrieve a token from the included credentials / ManagedIdentityCredential authentication unavailable

The Azure SDK tried every credential source (env vars, workload identity, managed identity, CLI…) and none worked.

Host key verification failedGit

Host key verification failed. fatal: Could not read from remote repository.

SSH doesn’t trust the server’s host key — first connection in a non-interactive environment, or the key changed.

REMOTE HOST IDENTIFICATION HAS CHANGEDLinux

WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! (ssh host key changed)

The server’s SSH host key differs from the one saved in ~/.ssh/known_hosts — usually because the server was rebuilt or the IP was…

Authentication token manipulation errorLinux

passwd: Authentication token manipulation error

passwd couldn’t update the password — the root filesystem is read-only, /etc/shadow has wrong permissions/attributes, or a PAM ru…

Two steps away (36)

AADSTS700016Azure

Azure AD (Entra ID): AADSTS700016 Application not found in the directory

The client ID in your sign-in request doesn’t exist in the tenant you’re authenticating against.

401HTTP

HTTP 401 Unauthorized

The request has no valid authentication credentials — you need to log in or send a valid token.

TokenExpiredErrorAuthentication

JWT Expired / Invalid Token

The JSON Web Token sent with the request is expired, malformed or signed with a different key, so the API rejects it (usually wit…

invalid_grantAuthentication

OAuth 2.0 Error: invalid_grant

The authorization code, refresh token or credentials sent to the token endpoint are invalid, expired, already used or were issued…

invalid_api_keyAPI

API Error: Invalid API Key / Incorrect API key provided

The API didn’t recognise the key sent with the request — it’s wrong, revoked, from another environment, or sent in the wrong plac…

AADSTS50076Azure

Azure AD (Entra ID): AADSTS50076 / AADSTS50079 — multi-factor authentication required

A Conditional Access policy requires MFA, but the sign-in flow (often a script, legacy client or ROPC password grant) can’t compl…

Repository not foundGit

remote: Repository not found. fatal: repository 'https://github.com/x/y.git/' not found

GitHub/GitLab says the repository doesn’t exist — or you lack access to a private repo.

Authentication failedGit

fatal: Authentication failed for 'https://github.com/x/y.git/'

HTTPS authentication to the Git host failed — wrong or expired credentials, or a password used where a token is required.

password auth removedGit

remote: Support for password authentication was removed on August 13, 2021. Please use a personal access token instead.

GitHub no longer accepts account passwords for Git over HTTPS.

workflow scopeGit

! [remote rejected] … (refusing to allow a Personal Access Token to create or update workflow `.github/workflows/x.yml` without `workflow` scope)

Your token can’t modify GitHub Actions workflow files without the workflow scope.

NOAUTHNode.js

ReplyError: NOAUTH Authentication required.

The Redis server requires a password (or ACL user) but the client didn’t authenticate.

E401npm

npm ERR! code E401 — Unable to authenticate, need: Basic realm / Incorrect or missing password

The registry rejected your credentials — missing, expired or wrong auth token.

MongoServerSelectionErrorNode.js

MongooseServerSelectionError: connect ECONNREFUSED 127.0.0.1:27017

The MongoDB driver couldn’t find a reachable server for the connection string.

ENEEDAUTHnpm

npm ERR! code ENEEDAUTH — need auth This command requires you to be logged in

npm needs credentials (publishing, private packages) but none are configured for that registry.

EOTPnpm

npm ERR! code EOTP — This operation requires a one-time password from your authenticator

Your npm account has 2FA for writes and no one-time password was supplied.

non-fast-forwardGit

Git: ! [rejected] … (fetch first) — error: failed to push some refs

The remote branch has commits you don’t have locally, so Git refuses to overwrite them. Pull (merge or rebase) first, then push.

not a git repositoryGit

fatal: not a git repository (or any of the parent directories): .git

You ran a Git command outside a Git working tree.

EACCESLinux

Linux: Permission denied

Your user (or the service user) lacks read/write/execute permission on a file, directory or one of its parents.

ECONNRESETAPI

Error: socket hang up / read ECONNRESET

The other side closed the TCP connection abruptly while your client was still using it.

port 22 timed outGit

ssh: connect to host github.com port 22: Connection timed out

Outbound SSH on port 22 is blocked (firewall, corporate or public Wi-Fi).

kex_exchange_identificationGit

kex_exchange_identification: Connection closed by remote host

The SSH connection was closed before the handshake — server overload, rate limiting, or a proxy/firewall interfering.

ECR token expiredAWS

denied: Your authorization token has expired. Reauthenticate and try again. (Amazon ECR)

Docker’s login to Amazon ECR has expired — ECR tokens last 12 hours, so pushes and pulls fail until you log in again.

UnrecognizedClientExceptionAWS

UnrecognizedClientException: The security token included in the request is invalid

The access key or session token isn’t recognised — wrong/deleted key, a session token missing for temporary credentials, or a reg…

pull access deniedDocker

pull access denied for image, repository does not exist or may require 'docker login'

Docker couldn’t pull the image: the name or tag is wrong, the repository is private and you’re not logged in, or it doesn’t exist…

AuthorizationFailedAzure

Azure: AuthorizationFailed — The client does not have authorization to perform action

The signed-in identity (user, service principal or managed identity) lacks an Azure RBAC role for that action on that scope.

unauthorized: authentication requiredDocker

unauthorized: authentication required (docker push / pull)

The registry needs credentials for this operation and the request had none or had expired ones.

deniedDocker

denied: requested access to the resource is denied (docker push)

You’re logged in, but not allowed to push to that repository — usually the image isn’t tagged with your own username/organisation.

Missing Authentication TokenAuthentication

{"message":"Missing Authentication Token"} / No authorization token was found

The request reached a protected endpoint without credentials — or, on AWS API Gateway, it hit a path/method that doesn’t exist.

invalid_tokenAuthentication

invalid_token: The access token is invalid (JsonWebTokenError: invalid signature / jwt malformed)

A token was sent but the server couldn’t verify it — bad signature, malformed, revoked, or issued for another audience or environ…

AADSTS50126Azure

AADSTS50126: Error validating credentials due to invalid username or password

Microsoft Entra ID (Azure AD) rejected the sign-in because the username or password is wrong — or the flow can’t use passwords fo…

ssh port 22 Connection refusedLinux

ssh: connect to host x port 22: Connection refused

The server answered, but nothing is listening on the SSH port — sshd isn’t running, it uses another port, or a firewall actively…

UNPROTECTED PRIVATE KEY FILELinux

WARNING: UNPROTECTED PRIVATE KEY FILE! Permissions 0644 for 'key.pem' are too open

SSH refuses to use a private key that other users can read; it must be readable only by you (chmod 600).

NO_PUBKEYLinux

The following signatures couldn't be verified because the public key is not available: NO_PUBKEY

apt can’t verify a repository’s signature because the repo’s signing key isn’t installed (or has expired/rotated).

sudoersLinux

user is not in the sudoers file. This incident will be reported.

Your account isn’t allowed to use sudo.

Read-only file systemLinux

Read-only file system (EROFS) — cannot write to disk

The filesystem is mounted read-only — often because the kernel remounted it after detecting disk errors.

Failed to connect to busLinux

Failed to connect to bus: No such file or directory (systemctl --user / timedatectl)

The command needs the D-Bus/systemd bus, which isn’t available in this session — common over su, sudo -u, cron, containers or WSL.