ClickHouse Frequently Fails to Be Connected with Error Message Indicating Incorrect Password

Symptom

Use the correct username and password to log in to the ClickHouse. The system displays a message indicating that the password is incorrect. Check the clickhouse-server.log file, which contains the following information:

Check the auth.log file. It is found that the user is locked due to frequent failed authentication with incorrect passwords.

Cause Analysis

This may be caused by frequent failed login attempts on other services with incorrect passwords. If the number of failed login attempts exceeds the upper limit, the user is locked. The user will be unlocked only after the lockout period expires.

Solution

1. Check the ClickHouse logs and audit logs for the IP addresses that experience frequent access attempts.
2. Identify the deployed services based on the IP address, review the scenario where access is attempted with incorrect passwords, and suspend the login request. After the lockout period expires, the user will be able to log in to services again.