User account lock

[Pierre Labanowski]

Hello,

Regularly, i have user accounts that are locked by the policy password.
following error message: "Client's credentials have been revoked"

It's possible to unlock the account when this happens. However, this
often happens when a third-party application misconfigured that made too
many wrong requests.
the account is locked sometimes 1 hour after it is unlocked ...

it is difficult to find the source of these connection errors. I don't
know which log file i can check to identify the source of the errors,
which could make it easier to understand the source of the problem.

Do you have a pointer on how to monitor and control in the log files the
various errors that lead to the locking of a user account ? thx

Regards,
Pierre