caseReview1

Author: dagiro

articles/hdinsight/domain-joined/domain-joined-authentication-issues.md

@@ -1,12 +1,12 @@
 ---
 title: Authentication issues in Azure HDInsight
 description: Authentication issues in Azure HDInsight
-ms.service: hdinsight
-ms.topic: troubleshooting
 author: hrasheed-msft
 ms.author: hrasheed
 ms.reviewer: jasonh
-ms.date: 08/09/2019
+ms.service: hdinsight
+ms.topic: troubleshooting
+ms.date: 11/08/2019
 ---
 
 # Authentication issues in Azure HDInsight
@@ -189,6 +189,24 @@ Ensure that you have successfully logged in to the Ambari portal once through th
 
 ---
 
+## Error fetching access token
+
+### Issue
+
+User receives error message `Error fetching access token`.
+
+### Cause
+
+This error occurs intermittently when users try to access the ADLS Gen2 using ACLs and the Kerberos token has expired.
+
+### Resolution
+
+* For Azure Data Lake Storage Gen1, clean browser cache and log into Ambari again.
+
+* For Azure Data Lake Storage Gen2, Run `/usr/lib/hdinsight-common/scripts/RegisterKerbWithOauth.sh <upn>` for the user the user is trying to login as
+
+---
+
 ## Next steps
 
 If you didn't see your problem or are unable to solve your issue, visit one of the following channels for more support: