1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
|
#
# lib/krb5/error_tables/krb5_err.et
#
# Copyright 1989,1990,1991 by the Massachusetts Institute of Technology.
# All Rights Reserved.
#
# Export of this software from the United States of America may
# require a specific license from the United States Government.
# It is the responsibility of any person or organization contemplating
# export to obtain such a license before exporting.
#
# WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
# distribute this software and its documentation for any purpose and
# without fee is hereby granted, provided that the above copyright
# notice appear in all copies and that both that copyright notice and
# this permission notice appear in supporting documentation, and that
# the name of M.I.T. not be used in advertising or publicity pertaining
# to distribution of the software without specific, written prior
# permission. Furthermore if you modify this software you must label
# your software as modified software and not distribute it in such a
# fashion that it might be confused with the original M.I.T. software.
# M.I.T. makes no representations about the suitability of
# this software for any purpose. It is provided "as is" without express
# or implied warranty.
#
#
# The Kerberos v5 library error code table.
# Protocol error codes are ERROR_TABLE_BASE_krb5 + the protocol error
# code number; other error codes start at ERROR_TABLE_BASE_krb5 + 128.
#
error_table krb5
#
# Note: the first 128 error codes are hard-coded and must match the error
# numbers defined in the Kerberos protocol specification, RFC-1510 or
# its successors.
#
# vv 0
error_code KRB5KDC_ERR_NONE, "No error"
error_code KRB5KDC_ERR_NAME_EXP, "Client's entry in database has expired"
error_code KRB5KDC_ERR_SERVICE_EXP, "Server's entry in database has expired"
error_code KRB5KDC_ERR_BAD_PVNO, "Requested protocol version not supported"
error_code KRB5KDC_ERR_C_OLD_MAST_KVNO, "Client's key is encrypted in an old master key"
error_code KRB5KDC_ERR_S_OLD_MAST_KVNO, "Server's key is encrypted in an old master key"
error_code KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN, "Client not found in Kerberos database"
error_code KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN, "Server not found in Kerberos database"
error_code KRB5KDC_ERR_PRINCIPAL_NOT_UNIQUE, "Principal has multiple entries in Kerberos database"
error_code KRB5KDC_ERR_NULL_KEY, "Client or server has a null key"
error_code KRB5KDC_ERR_CANNOT_POSTDATE, "Ticket is ineligible for postdating"
error_code KRB5KDC_ERR_NEVER_VALID, "Requested effective lifetime is negative or too short"
error_code KRB5KDC_ERR_POLICY, "KDC policy rejects request"
error_code KRB5KDC_ERR_BADOPTION, "KDC can't fulfill requested option"
error_code KRB5KDC_ERR_ETYPE_NOSUPP, "KDC has no support for encryption type"
error_code KRB5KDC_ERR_SUMTYPE_NOSUPP, "KDC has no support for checksum type"
error_code KRB5KDC_ERR_PADATA_TYPE_NOSUPP, "KDC has no support for padata type"
error_code KRB5KDC_ERR_TRTYPE_NOSUPP, "KDC has no support for transited type"
error_code KRB5KDC_ERR_CLIENT_REVOKED, "Clients credentials have been revoked"
error_code KRB5KDC_ERR_SERVICE_REVOKED, "Credentials for server have been revoked"
error_code KRB5KDC_ERR_TGT_REVOKED, "TGT has been revoked"
error_code KRB5KDC_ERR_CLIENT_NOTYET, "Client not yet valid - try again later"
error_code KRB5KDC_ERR_SERVICE_NOTYET, "Server not yet valid - try again later"
error_code KRB5KDC_ERR_KEY_EXP, "Password has expired"
error_code KRB5KDC_ERR_PREAUTH_FAILED, "Preauthentication failed"
# ^^ 24
error_code KRB5KDC_ERR_PREAUTH_REQUIRED, "Additional pre-authentication required"
error_code KRB5KDC_ERR_SERVER_NOMATCH, "Requested server and ticket don't match"
error_code KRB5PLACEHOLD_27, "KRB5 error code 27"
error_code KRB5PLACEHOLD_28, "KRB5 error code 28"
error_code KRB5PLACEHOLD_29, "KRB5 error code 29"
error_code KRB5PLACEHOLD_30, "KRB5 error code 30"
# vv 31
error_code KRB5KRB_AP_ERR_BAD_INTEGRITY, "Decrypt integrity check failed"
error_code KRB5KRB_AP_ERR_TKT_EXPIRED, "Ticket expired"
error_code KRB5KRB_AP_ERR_TKT_NYV, "Ticket not yet valid"
error_code KRB5KRB_AP_ERR_REPEAT, "Request is a replay"
error_code KRB5KRB_AP_ERR_NOT_US, "The ticket isn't for us"
error_code KRB5KRB_AP_ERR_BADMATCH, "Ticket/authenticator don't match"
error_code KRB5KRB_AP_ERR_SKEW, "Clock skew too great"
error_code KRB5KRB_AP_ERR_BADADDR, "Incorrect net address"
error_code KRB5KRB_AP_ERR_BADVERSION, "Protocol version mismatch"
error_code KRB5KRB_AP_ERR_MSG_TYPE, "Invalid message type"
error_code KRB5KRB_AP_ERR_MODIFIED, "Message stream modified"
error_code KRB5KRB_AP_ERR_BADORDER, "Message out of order"
error_code KRB5KRB_AP_ERR_ILL_CR_TKT, "Illegal cross-realm ticket"
error_code KRB5KRB_AP_ERR_BADKEYVER, "Key version is not available"
error_code KRB5KRB_AP_ERR_NOKEY, "Service key not available"
error_code KRB5KRB_AP_ERR_MUT_FAIL, "Mutual authentication failed"
error_code KRB5KRB_AP_ERR_BADDIRECTION, "Incorrect message direction"
error_code KRB5KRB_AP_ERR_METHOD, "Alternative authentication method required"
error_code KRB5KRB_AP_ERR_BADSEQ, "Incorrect sequence number in message"
error_code KRB5KRB_AP_ERR_INAPP_CKSUM, "Inappropriate type of checksum in message"
#^^ 50
error_code KRB5PLACEHOLD_51, "KRB5 error code 51"
error_code KRB5PLACEHOLD_52, "KRB5 error code 52"
error_code KRB5PLACEHOLD_53, "KRB5 error code 53"
error_code KRB5PLACEHOLD_54, "KRB5 error code 54"
error_code KRB5PLACEHOLD_55, "KRB5 error code 55"
error_code KRB5PLACEHOLD_56, "KRB5 error code 56"
error_code KRB5PLACEHOLD_57, "KRB5 error code 57"
error_code KRB5PLACEHOLD_58, "KRB5 error code 58"
error_code KRB5PLACEHOLD_59, "KRB5 error code 59"
error_code KRB5KRB_ERR_GENERIC, "Generic error (see e-text)"
error_code KRB5KRB_ERR_FIELD_TOOLONG, "Field is too long for this implementation"
error_code KRB5PLACEHOLD_62, "KRB5 error code 62"
error_code KRB5PLACEHOLD_63, "KRB5 error code 63"
error_code KRB5PLACEHOLD_64, "KRB5 error code 64"
error_code KRB5PLACEHOLD_65, "KRB5 error code 65"
error_code KRB5PLACEHOLD_66, "KRB5 error code 66"
error_code KRB5PLACEHOLD_67, "KRB5 error code 67"
error_code KRB5PLACEHOLD_68, "KRB5 error code 68"
error_code KRB5PLACEHOLD_69, "KRB5 error code 69"
error_code KRB5PLACEHOLD_70, "KRB5 error code 70"
error_code KRB5PLACEHOLD_71, "KRB5 error code 71"
error_code KRB5PLACEHOLD_72, "KRB5 error code 72"
error_code KRB5PLACEHOLD_73, "KRB5 error code 73"
error_code KRB5PLACEHOLD_74, "KRB5 error code 74"
error_code KRB5PLACEHOLD_75, "KRB5 error code 75"
error_code KRB5PLACEHOLD_76, "KRB5 error code 76"
error_code KRB5PLACEHOLD_77, "KRB5 error code 77"
error_code KRB5PLACEHOLD_78, "KRB5 error code 78"
error_code KRB5PLACEHOLD_79, "KRB5 error code 79"
error_code KRB5PLACEHOLD_80, "KRB5 error code 80"
error_code KRB5PLACEHOLD_81, "KRB5 error code 81"
error_code KRB5PLACEHOLD_82, "KRB5 error code 82"
error_code KRB5PLACEHOLD_83, "KRB5 error code 83"
error_code KRB5PLACEHOLD_84, "KRB5 error code 84"
error_code KRB5PLACEHOLD_85, "KRB5 error code 85"
error_code KRB5PLACEHOLD_86, "KRB5 error code 86"
error_code KRB5PLACEHOLD_87, "KRB5 error code 87"
error_code KRB5PLACEHOLD_88, "KRB5 error code 88"
error_code KRB5PLACEHOLD_89, "KRB5 error code 89"
error_code KRB5PLACEHOLD_90, "KRB5 error code 90"
error_code KRB5PLACEHOLD_91, "KRB5 error code 91"
error_code KRB5PLACEHOLD_92, "KRB5 error code 92"
error_code KRB5PLACEHOLD_93, "KRB5 error code 93"
error_code KRB5PLACEHOLD_94, "KRB5 error code 94"
error_code KRB5PLACEHOLD_95, "KRB5 error code 95"
error_code KRB5PLACEHOLD_96, "KRB5 error code 96"
error_code KRB5PLACEHOLD_97, "KRB5 error code 97"
error_code KRB5PLACEHOLD_98, "KRB5 error code 98"
error_code KRB5PLACEHOLD_99, "KRB5 error code 99"
error_code KRB5PLACEHOLD_100, "KRB5 error code 100"
error_code KRB5PLACEHOLD_101, "KRB5 error code 101"
error_code KRB5PLACEHOLD_102, "KRB5 error code 102"
error_code KRB5PLACEHOLD_103, "KRB5 error code 103"
error_code KRB5PLACEHOLD_104, "KRB5 error code 104"
error_code KRB5PLACEHOLD_105, "KRB5 error code 105"
error_code KRB5PLACEHOLD_106, "KRB5 error code 106"
error_code KRB5PLACEHOLD_107, "KRB5 error code 107"
error_code KRB5PLACEHOLD_108, "KRB5 error code 108"
error_code KRB5PLACEHOLD_109, "KRB5 error code 109"
error_code KRB5PLACEHOLD_110, "KRB5 error code 110"
error_code KRB5PLACEHOLD_111, "KRB5 error code 111"
error_code KRB5PLACEHOLD_112, "KRB5 error code 112"
error_code KRB5PLACEHOLD_113, "KRB5 error code 113"
error_code KRB5PLACEHOLD_114, "KRB5 error code 114"
error_code KRB5PLACEHOLD_115, "KRB5 error code 115"
error_code KRB5PLACEHOLD_116, "KRB5 error code 116"
error_code KRB5PLACEHOLD_117, "KRB5 error code 117"
error_code KRB5PLACEHOLD_118, "KRB5 error code 118"
error_code KRB5PLACEHOLD_119, "KRB5 error code 119"
error_code KRB5PLACEHOLD_120, "KRB5 error code 120"
error_code KRB5PLACEHOLD_121, "KRB5 error code 121"
error_code KRB5PLACEHOLD_122, "KRB5 error code 122"
error_code KRB5PLACEHOLD_123, "KRB5 error code 123"
error_code KRB5PLACEHOLD_124, "KRB5 error code 124"
error_code KRB5PLACEHOLD_125, "KRB5 error code 125"
error_code KRB5PLACEHOLD_126, "KRB5 error code 126"
error_code KRB5PLACEHOLD_127, "KRB5 error code 127"
error_code KRB5_ERR_RCSID, "$Id$"
error_code KRB5_LIBOS_BADLOCKFLAG, "Invalid flag for file lock mode"
error_code KRB5_LIBOS_CANTREADPWD, "Cannot read password"
error_code KRB5_LIBOS_BADPWDMATCH, "Password mismatch"
error_code KRB5_LIBOS_PWDINTR, "Password read interrupted"
error_code KRB5_PARSE_ILLCHAR, "Illegal character in component name"
error_code KRB5_PARSE_MALFORMED, "Malformed representation of principal"
error_code KRB5_CONFIG_CANTOPEN, "Can't open/find Kerberos configuration file"
error_code KRB5_CONFIG_BADFORMAT, "Improper format of Kerberos configuration file"
error_code KRB5_CONFIG_NOTENUFSPACE, "Insufficient space to return complete information"
error_code KRB5_BADMSGTYPE, "Invalid message type specified for encoding"
error_code KRB5_CC_BADNAME, "Credential cache name malformed"
error_code KRB5_CC_UNKNOWN_TYPE, "Unknown credential cache type"
error_code KRB5_CC_NOTFOUND, "Matching credential not found"
error_code KRB5_CC_END, "End of credential cache reached"
error_code KRB5_NO_TKT_SUPPLIED, "Request did not supply a ticket"
error_code KRB5KRB_AP_WRONG_PRINC, "Wrong principal in request"
error_code KRB5KRB_AP_ERR_TKT_INVALID, "Ticket has invalid flag set"
error_code KRB5_PRINC_NOMATCH, "Requested principal and ticket don't match"
error_code KRB5_KDCREP_MODIFIED, "KDC reply did not match expectations"
error_code KRB5_KDCREP_SKEW, "Clock skew too great in KDC reply"
error_code KRB5_IN_TKT_REALM_MISMATCH, "Client/server realm mismatch in initial ticket request"
error_code KRB5_PROG_ETYPE_NOSUPP, "Program lacks support for encryption type"
error_code KRB5_PROG_KEYTYPE_NOSUPP, "Program lacks support for key type"
error_code KRB5_WRONG_ETYPE, "Requested encryption type not used in message"
error_code KRB5_PROG_SUMTYPE_NOSUPP, "Program lacks support for checksum type"
error_code KRB5_REALM_UNKNOWN, "Cannot find KDC for requested realm"
error_code KRB5_SERVICE_UNKNOWN, "Kerberos service unknown"
error_code KRB5_KDC_UNREACH, "Cannot contact any KDC for requested realm"
error_code KRB5_NO_LOCALNAME, "No local name found for principal name"
error_code KRB5_MUTUAL_FAILED, "Mutual authentication failed"
# some of these should be combined/supplanted by system codes
error_code KRB5_RC_TYPE_EXISTS, "Replay cache type is already registered"
error_code KRB5_RC_MALLOC, "No more memory to allocate (in replay cache code)"
error_code KRB5_RC_TYPE_NOTFOUND, "Replay cache type is unknown"
error_code KRB5_RC_UNKNOWN, "Generic unknown RC error"
error_code KRB5_RC_REPLAY, "Message is a replay"
error_code KRB5_RC_IO, "Replay I/O operation failed XXX"
error_code KRB5_RC_NOIO, "Replay cache type does not support non-volatile storage"
error_code KRB5_RC_PARSE, "Replay cache name parse/format error"
error_code KRB5_RC_IO_EOF, "End-of-file on replay cache I/O"
error_code KRB5_RC_IO_MALLOC, "No more memory to allocate (in replay cache I/O code)"
error_code KRB5_RC_IO_PERM, "Permission denied in replay cache code"
error_code KRB5_RC_IO_IO, "I/O error in replay cache i/o code"
error_code KRB5_RC_IO_UNKNOWN, "Generic unknown RC/IO error"
error_code KRB5_RC_IO_SPACE, "Insufficient system space to store replay information"
error_code KRB5_TRANS_CANTOPEN, "Can't open/find realm translation file"
error_code KRB5_TRANS_BADFORMAT, "Improper format of realm translation file"
error_code KRB5_LNAME_CANTOPEN, "Can't open/find lname translation database"
error_code KRB5_LNAME_NOTRANS, "No translation available for requested principal"
error_code KRB5_LNAME_BADFORMAT, "Improper format of translation database entry"
error_code KRB5_CRYPTO_INTERNAL, "Cryptosystem internal error"
error_code KRB5_KT_BADNAME, "Key table name malformed"
error_code KRB5_KT_UNKNOWN_TYPE, "Unknown Key table type"
error_code KRB5_KT_NOTFOUND, "Key table entry not found"
error_code KRB5_KT_END, "End of key table reached"
error_code KRB5_KT_NOWRITE, "Cannot write to specified key table"
error_code KRB5_KT_IOERR, "Error writing to key table"
error_code KRB5_NO_TKT_IN_RLM, "Cannot find ticket for requested realm"
error_code KRB5DES_BAD_KEYPAR, "DES key has bad parity"
error_code KRB5DES_WEAK_KEY, "DES key is a weak key"
error_code KRB5_BAD_ENCTYPE, "Bad encryption type"
error_code KRB5_BAD_KEYSIZE, "Key size is incompatible with encryption type"
error_code KRB5_BAD_MSIZE, "Message size is incompatible with encryption type"
error_code KRB5_CC_TYPE_EXISTS, "Credentials cache type is already registered."
error_code KRB5_KT_TYPE_EXISTS, "Key table type is already registered."
error_code KRB5_CC_IO, "Credentials cache I/O operation failed XXX"
error_code KRB5_FCC_PERM, "Credentials cache file permissions incorrect"
error_code KRB5_FCC_NOFILE, "No credentials cache file found"
error_code KRB5_FCC_INTERNAL, "Internal file credentials cache error"
error_code KRB5_CC_WRITE, "Error writing to credentials cache file"
error_code KRB5_CC_NOMEM, "No more memory to allocate (in credentials cache code)"
error_code KRB5_CC_FORMAT, "Bad format in credentials cache"
error_code KRB5_CC_NOT_KTYPE, "No credentials found with supported encryption types"
# errors for dual tgt library calls
error_code KRB5_INVALID_FLAGS, "Invalid KDC option combination (library internal error)"
error_code KRB5_NO_2ND_TKT, "Request missing second ticket"
error_code KRB5_NOCREDS_SUPPLIED, "No credentials supplied to library routine"
# errors for sendauth (and recvauth)
error_code KRB5_SENDAUTH_BADAUTHVERS, "Bad sendauth version was sent"
error_code KRB5_SENDAUTH_BADAPPLVERS, "Bad application version was sent (via sendauth)"
error_code KRB5_SENDAUTH_BADRESPONSE, "Bad response (during sendauth exchange)"
error_code KRB5_SENDAUTH_REJECTED, "Server rejected authentication (during sendauth exchange)"
# errors for preauthentication
error_code KRB5_PREAUTH_BAD_TYPE, "Unsupported preauthentication type"
error_code KRB5_PREAUTH_NO_KEY, "Required preauthentication key not supplied"
error_code KRB5_PREAUTH_FAILED, "Generic preauthentication failure"
# version number errors
error_code KRB5_RCACHE_BADVNO, "Unsupported replay cache format version number"
error_code KRB5_CCACHE_BADVNO, "Unsupported credentials cache format version number"
error_code KRB5_KEYTAB_BADVNO, "Unsupported key table format version number"
#
#
error_code KRB5_PROG_ATYPE_NOSUPP, "Program lacks support for address type"
error_code KRB5_RC_REQUIRED, "Message replay detection requires rcache parameter"
error_code KRB5_ERR_BAD_HOSTNAME, "Hostname cannot be canonicalized"
error_code KRB5_ERR_HOST_REALM_UNKNOWN, "Cannot determine realm for host"
error_code KRB5_SNAME_UNSUPP_NAMETYPE, "Conversion to service principal undefined for name type"
error_code KRB5KRB_AP_ERR_V4_REPLY, "Initial Ticket response appears to be Version 4 error"
error_code KRB5_REALM_CANT_RESOLVE, "Cannot resolve network address for KDC in requested realm"
error_code KRB5_TKT_NOT_FORWARDABLE, "Requesting ticket can't get forwardable tickets"
error_code KRB5_FWD_BAD_PRINCIPAL, "Bad principal name while trying to forward credentials"
error_code KRB5_GET_IN_TKT_LOOP, "Looping detected inside krb5_get_in_tkt"
error_code KRB5_CONFIG_NODEFREALM, "Configuration file does not specify default realm"
error_code KRB5_SAM_UNSUPPORTED, "Bad SAM flags in obtain_sam_padata"
error_code KRB5_KT_NAME_TOOLONG, "Keytab name too long"
error_code KRB5_KT_KVNONOTFOUND, "Key version number for principal in key table is incorrect"
error_code KRB5_APPL_EXPIRED, "This application has expired"
error_code KRB5_LIB_EXPIRED, "This Krb5 library has expired"
error_code KRB5_CHPW_PWDNULL, "New password cannot be zero length"
error_code KRB5_CHPW_FAIL, "Password change failed"
error_code KRB5_KT_FORMAT, "Bad format in keytab"
error_code KRB5_NOPERM_ETYPE, "Encryption type not permitted"
error_code KRB5_CONFIG_ETYPE_NOSUPP, "No supported encryption types (config file error?)"
error_code KRB5_OBSOLETE_FN, "Program called an obsolete, deleted function"
# translated versions of getaddrinfo errors
error_code KRB5_EAI_FAIL, "unknown getaddrinfo failure"
error_code KRB5_EAI_NODATA, "no data available for host/domain name"
error_code KRB5_EAI_NONAME, "host/domain name not found"
error_code KRB5_EAI_SERVICE, "service name unknown"
end
|