# Users password expiration or blocked accounts
**URL:** https://discuss.elastic.co/t/users-password-expiration-or-blocked-accounts/295086
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [January 21, 2022, 4:31pm UTC](https://discuss.elastic.co/t/users-password-expiration-or-blocked-accounts/295086 "2022-01-21T16:31:14Z")
**Posts on this page:** 8
**Page:** 1
### Author:  [@d.silwon](https://discuss.elastic.co/u/d.silwon)
#### Post date: [January 21, 2022, 4:31pm UTC](https://discuss.elastic.co/t/users-password-expiration-or-blocked-accounts/295086/1 "2022-01-21T16:31:14Z")
Dears,
In our Elastic cluster we have few local users which login to Kibana for browsing indexes with applications logs.
Twice a week two users reports me problems with login to Kibana. After password reset these users can login to Kibana but problem come back for few days with such errors in the browser:
StatusCode: 404
Error: "Not found"
Message: "Not found"
Can such an account be blocked by elastic when the user enters the wrong password few times?
How can I check the status of user and password? Is there any way to do it?
Best Regards,
Dan
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [January 23, 2022, 11:43pm UTC](https://discuss.elastic.co/t/users-password-expiration-or-blocked-accounts/295086/2 "2022-01-23T23:43:11Z")
What realm is the user in?
---
### Author:  [@d.silwon](https://discuss.elastic.co/u/d.silwon)
#### Post date: [January 24, 2022, 5:52am UTC](https://discuss.elastic.co/t/users-password-expiration-or-blocked-accounts/295086/3 "2022-01-24T05:52:48Z")
@warkolm Here you are my configuration:
```auto
xpack:
security:
authc:
realms:
active_directory:
my_ad:
order: 0
domain_name: my.ldap
url: ldaps://my.ldap:636
bind_dn: elastic@my.ldap
ssl:
certificate_authorities: ["/etc/elasticsearch/certs/ca.crt"]
verification_mode: certificate
files:
role_mapping: "/etc/elasticsearch/role_mapping.yml"
native:
native1:
order: 1
```
Thanks a lot.
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [January 24, 2022, 6:00am UTC](https://discuss.elastic.co/t/users-password-expiration-or-blocked-accounts/295086/4 "2022-01-24T06:00:45Z")
It's likely AD that's causing the lockout then.
---
### Author:  [@d.silwon](https://discuss.elastic.co/u/d.silwon)
#### Post date: [January 24, 2022, 6:09am UTC](https://discuss.elastic.co/t/users-password-expiration-or-blocked-accounts/295086/5 "2022-01-24T06:09:56Z")
@warkolm I understand that such situation can occur when user have the same password in Elasticsearch (native user) and AD. Is it true?
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [January 24, 2022, 6:30am UTC](https://discuss.elastic.co/t/users-password-expiration-or-blocked-accounts/295086/6 "2022-01-24T06:30:59Z")
Only if the user exists in both realms and it has been set to that, yes.
---
### Author:  [@d.silwon](https://discuss.elastic.co/u/d.silwon)
#### Post date: [January 24, 2022, 6:35am UTC](https://discuss.elastic.co/t/users-password-expiration-or-blocked-accounts/295086/7 "2022-01-24T06:35:23Z")
Thanks a lot.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 21, 2022, 6:35am UTC](https://discuss.elastic.co/t/users-password-expiration-or-blocked-accounts/295086/8 "2022-02-21T06:35:29Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.