2 # Error messages for the krb5 library
4 # This might look like a com_err file, but is not
6 id "$Id: krb5_err.et,v 1.9 2000/04/06 00:41:37 assar Exp $"
11 error_code NONE, "No error"
12 error_code NAME_EXP, "Client's entry in database has expired"
13 error_code SERVICE_EXP, "Server's entry in database has expired"
14 error_code BAD_PVNO, "Requested protocol version not supported"
15 error_code C_OLD_MAST_KVNO, "Client's key is encrypted in an old master key"
16 error_code S_OLD_MAST_KVNO, "Server's key is encrypted in an old master key"
17 error_code C_PRINCIPAL_UNKNOWN, "Client not found in Kerberos database"
18 error_code S_PRINCIPAL_UNKNOWN, "Server not found in Kerberos database"
19 error_code PRINCIPAL_NOT_UNIQUE,"Principal has multiple entries in Kerberos database"
20 error_code NULL_KEY, "Client or server has a null key"
21 error_code CANNOT_POSTDATE, "Ticket is ineligible for postdating"
22 error_code NEVER_VALID, "Requested effective lifetime is negative or too short"
23 error_code POLICY, "KDC policy rejects request"
24 error_code BADOPTION, "KDC can't fulfill requested option"
25 error_code ETYPE_NOSUPP, "KDC has no support for encryption type"
26 error_code SUMTYPE_NOSUPP, "KDC has no support for checksum type"
27 error_code PADATA_TYPE_NOSUPP, "KDC has no support for padata type"
28 error_code TRTYPE_NOSUPP, "KDC has no support for transited type"
29 error_code CLIENT_REVOKED, "Clients credentials have been revoked"
30 error_code SERVICE_REVOKED, "Credentials for server have been revoked"
31 error_code TGT_REVOKED, "TGT has been revoked"
32 error_code CLIENT_NOTYET, "Client not yet valid - try again later"
33 error_code SERVICE_NOTYET, "Server not yet valid - try again later"
34 error_code KEY_EXPIRED, "Password has expired"
35 error_code PREAUTH_FAILED, "Preauthentication failed"
36 error_code PREAUTH_REQUIRED, "Additional pre-authentication required"
37 error_code SERVER_NOMATCH, "Requested server and ticket don't match"
42 error_code ERR_BAD_INTEGRITY, "Decrypt integrity check failed"
43 error_code ERR_TKT_EXPIRED, "Ticket expired"
44 error_code ERR_TKT_NYV, "Ticket not yet valid"
45 error_code ERR_REPEAT, "Request is a replay"
46 error_code ERR_NOT_US, "The ticket isn't for us"
47 error_code ERR_BADMATCH, "Ticket/authenticator don't match"
48 error_code ERR_SKEW, "Clock skew too great"
49 error_code ERR_BADADDR, "Incorrect net address"
50 error_code ERR_BADVERSION, "Protocol version mismatch"
51 error_code ERR_MSG_TYPE, "Invalid message type"
52 error_code ERR_MODIFIED, "Message stream modified"
53 error_code ERR_BADORDER, "Message out of order"
54 error_code ERR_ILL_CR_TKT, "Invalid cross-realm ticket"
55 error_code ERR_BADKEYVER, "Key version is not available"
56 error_code ERR_NOKEY, "Service key not available"
57 error_code ERR_MUT_FAIL, "Mutual authentication failed"
58 error_code ERR_BADDIRECTION, "Incorrect message direction"
59 error_code ERR_METHOD, "Alternative authentication method required"
60 error_code ERR_BADSEQ, "Incorrect sequence number in message"
61 error_code ERR_INAPP_CKSUM, "Inappropriate type of checksum in message"
62 error_code PATH_NOT_ACCEPTED, "Policy rejects transited path"
65 error_code RESPONSE_TOO_BIG, "Response too big for UDP, retry with TCP"
68 error_code GENERIC, "Generic error (see e-text)"
69 error_code FIELD_TOOLONG, "Field is too long for this implementation"
74 error_code CLIENT_NOT_TRUSTED, "Client not trusted"
75 error_code KDC_NOT_TRUSTED, "KDC not trusted"
76 error_code INVALID_SIG, "Invalid signature"
77 error_code KEY_TOO_WEAK, "Key too weak"
78 error_code CERTIFICATE_MISMATCH, "Certificate mismatch"
80 error_code USER_TO_USER_REQUIRED, "User to user required"
82 error_code CANT_VERIFY_CERTIFICATE, "Cannot verify certificate"
83 error_code INVALID_CERTIFICATE, "Invalid certificate"
84 error_code REVOKED_CERTIFICATE, "Revoked certificate"
85 error_code REVOCATION_STATUS_UNKNOWN, "Revocation status unknown"
86 error_code REVOCATION_STATUS_UNAVAILABLE,"Revocation status unavailable"
87 error_code CLIENT_NAME_MISMATCH, "Client name mismatch"
88 error_code KDC_NAME_MISMATCH, "KDC name mismatch"
94 error_code KRB5_ERR_RCSID, "$Id: krb5_err.et,v 1.9 2000/04/06 00:41:37 assar Exp $"
96 error_code KRB5_LIBOS_BADLOCKFLAG, "Invalid flag for file lock mode"
97 error_code KRB5_LIBOS_CANTREADPWD, "Cannot read password"
98 error_code KRB5_LIBOS_BADPWDMATCH, "Password mismatch"
99 error_code KRB5_LIBOS_PWDINTR, "Password read interrupted"
101 error_code KRB5_PARSE_ILLCHAR, "Invalid character in component name"
102 error_code KRB5_PARSE_MALFORMED, "Malformed representation of principal"
104 error_code KRB5_CONFIG_CANTOPEN, "Can't open/find configuration file"
105 error_code KRB5_CONFIG_BADFORMAT, "Improper format of configuration file"
106 error_code KRB5_CONFIG_NOTENUFSPACE, "Insufficient space to return complete information"
108 error_code KRB5_BADMSGTYPE, "Invalid message type specified for encoding"
110 error_code KRB5_CC_BADNAME, "Credential cache name malformed"
111 error_code KRB5_CC_UNKNOWN_TYPE, "Unknown credential cache type"
112 error_code KRB5_CC_NOTFOUND, "Matching credential not found"
113 error_code KRB5_CC_END, "End of credential cache reached"
115 error_code KRB5_NO_TKT_SUPPLIED, "Request did not supply a ticket"
117 error_code KRB5KRB_AP_WRONG_PRINC, "Wrong principal in request"
118 error_code KRB5KRB_AP_ERR_TKT_INVALID, "Ticket has invalid flag set"
120 error_code KRB5_PRINC_NOMATCH, "Requested principal and ticket don't match"
121 error_code KRB5_KDCREP_MODIFIED, "KDC reply did not match expectations"
122 error_code KRB5_KDCREP_SKEW, "Clock skew too great in KDC reply"
123 error_code KRB5_IN_TKT_REALM_MISMATCH, "Client/server realm mismatch in initial ticket request"
125 error_code KRB5_PROG_ETYPE_NOSUPP, "Program lacks support for encryption type"
126 error_code KRB5_PROG_KEYTYPE_NOSUPP, "Program lacks support for key type"
127 error_code KRB5_WRONG_ETYPE, "Requested encryption type not used in message"
128 error_code KRB5_PROG_SUMTYPE_NOSUPP, "Program lacks support for checksum type"
130 error_code KRB5_REALM_UNKNOWN, "Cannot find KDC for requested realm"
131 error_code KRB5_SERVICE_UNKNOWN, "Kerberos service unknown"
132 error_code KRB5_KDC_UNREACH, "Cannot contact any KDC for requested realm"
133 error_code KRB5_NO_LOCALNAME, "No local name found for principal name"
135 error_code KRB5_MUTUAL_FAILED, "Mutual authentication failed"
137 # some of these should be combined/supplanted by system codes
139 error_code KRB5_RC_TYPE_EXISTS, "Replay cache type is already registered"
140 error_code KRB5_RC_MALLOC, "No more memory to allocate (in replay cache code)"
141 error_code KRB5_RC_TYPE_NOTFOUND, "Replay cache type is unknown"
142 error_code KRB5_RC_UNKNOWN, "Generic unknown RC error"
143 error_code KRB5_RC_REPLAY, "Message is a replay"
144 error_code KRB5_RC_IO, "Replay I/O operation failed XXX"
145 error_code KRB5_RC_NOIO, "Replay cache type does not support non-volatile storage"
146 error_code KRB5_RC_PARSE, "Replay cache name parse/format error"
148 error_code KRB5_RC_IO_EOF, "End-of-file on replay cache I/O"
149 error_code KRB5_RC_IO_MALLOC, "No more memory to allocate (in replay cache I/O code)"
150 error_code KRB5_RC_IO_PERM, "Permission denied in replay cache code"
151 error_code KRB5_RC_IO_IO, "I/O error in replay cache i/o code"
152 error_code KRB5_RC_IO_UNKNOWN, "Generic unknown RC/IO error"
153 error_code KRB5_RC_IO_SPACE, "Insufficient system space to store replay information"
155 error_code KRB5_TRANS_CANTOPEN, "Can't open/find realm translation file"
156 error_code KRB5_TRANS_BADFORMAT, "Improper format of realm translation file"
158 error_code KRB5_LNAME_CANTOPEN, "Can't open/find lname translation database"
159 error_code KRB5_LNAME_NOTRANS, "No translation available for requested principal"
160 error_code KRB5_LNAME_BADFORMAT, "Improper format of translation database entry"
162 error_code KRB5_CRYPTO_INTERNAL, "Cryptosystem internal error"
164 error_code KRB5_KT_BADNAME, "Key table name malformed"
165 error_code KRB5_KT_UNKNOWN_TYPE, "Unknown Key table type"
166 error_code KRB5_KT_NOTFOUND, "Key table entry not found"
167 error_code KRB5_KT_END, "End of key table reached"
168 error_code KRB5_KT_NOWRITE, "Cannot write to specified key table"
169 error_code KRB5_KT_IOERR, "Error writing to key table"
171 error_code KRB5_NO_TKT_IN_RLM, "Cannot find ticket for requested realm"
172 error_code KRB5DES_BAD_KEYPAR, "DES key has bad parity"
173 error_code KRB5DES_WEAK_KEY, "DES key is a weak key"
175 error_code KRB5_BAD_ENCTYPE, "Bad encryption type"
176 error_code KRB5_BAD_KEYSIZE, "Key size is incompatible with encryption type"
177 error_code KRB5_BAD_MSIZE, "Message size is incompatible with encryption type"
179 error_code KRB5_CC_TYPE_EXISTS, "Credentials cache type is already registered."
180 error_code KRB5_KT_TYPE_EXISTS, "Key table type is already registered."
182 error_code KRB5_CC_IO, "Credentials cache I/O operation failed XXX"
183 error_code KRB5_FCC_PERM, "Credentials cache file permissions incorrect"
184 error_code KRB5_FCC_NOFILE, "No credentials cache file found"
185 error_code KRB5_FCC_INTERNAL, "Internal file credentials cache error"
186 error_code KRB5_CC_WRITE, "Error writing to credentials cache file"
187 error_code KRB5_CC_NOMEM, "No more memory to allocate (in credentials cache code)"
188 error_code KRB5_CC_FORMAT, "Bad format in credentials cache"
190 # errors for dual tgt library calls
191 error_code KRB5_INVALID_FLAGS, "Invalid KDC option combination (library internal error)"
192 error_code KRB5_NO_2ND_TKT, "Request missing second ticket"
194 error_code KRB5_NOCREDS_SUPPLIED, "No credentials supplied to library routine"
196 # errors for sendauth (and recvauth)
198 error_code KRB5_SENDAUTH_BADAUTHVERS, "Bad sendauth version was sent"
199 error_code KRB5_SENDAUTH_BADAPPLVERS, "Bad application version was sent (via sendauth)"
200 error_code KRB5_SENDAUTH_BADRESPONSE, "Bad response (during sendauth exchange)"
201 error_code KRB5_SENDAUTH_REJECTED, "Server rejected authentication (during sendauth exchange)"
203 # errors for preauthentication
205 error_code KRB5_PREAUTH_BAD_TYPE, "Unsupported preauthentication type"
206 error_code KRB5_PREAUTH_NO_KEY, "Required preauthentication key not supplied"
207 error_code KRB5_PREAUTH_FAILED, "Generic preauthentication failure"
209 # version number errors
211 error_code KRB5_RCACHE_BADVNO, "Unsupported replay cache format version number"
212 error_code KRB5_CCACHE_BADVNO, "Unsupported credentials cache format version number"
213 error_code KRB5_KEYTAB_BADVNO, "Unsupported key table format version number"
218 error_code KRB5_PROG_ATYPE_NOSUPP, "Program lacks support for address type"
219 error_code KRB5_RC_REQUIRED, "Message replay detection requires rcache parameter"
220 error_code KRB5_ERR_BAD_HOSTNAME, "Hostname cannot be canonicalized"
221 error_code KRB5_ERR_HOST_REALM_UNKNOWN, "Cannot determine realm for host"
222 error_code KRB5_SNAME_UNSUPP_NAMETYPE, "Conversion to service principal undefined for name type"
224 error_code KRB5KRB_AP_ERR_V4_REPLY, "Initial Ticket response appears to be Version 4"
225 error_code KRB5_REALM_CANT_RESOLVE, "Cannot resolve KDC for requested realm"
226 error_code KRB5_TKT_NOT_FORWARDABLE, "Requesting ticket can't get forwardable tickets"
227 error_code KRB5_FWD_BAD_PRINCIPAL, "Bad principal name while trying to forward credentials"
229 error_code KRB5_GET_IN_TKT_LOOP, "Looping detected inside krb5_get_in_tkt"
230 error_code KRB5_CONFIG_NODEFREALM, "Configuration file does not specify default realm"
232 error_code KRB5_SAM_UNSUPPORTED, "Bad SAM flags in obtain_sam_padata"
233 error_code KRB5_KT_NAME_TOOLONG, "Keytab name too long"