Tampermonkey®
by Jan Biniok
The account was manually deactivated by an administrator using ipa user-disable , meaning it is not locked due to failed passwords.
You did not run kinit to authenticate, or your existing Kerberos ticket expired. ipa user-unlock