Kerberos Error Messages

Kerberos V5 Library Error Codes

Kerberos V5 Library Error Codes

This is the Kerberos v5 library error code table. Protocol error codes are ERROR_TABLE_BASE_krb5 + the protocol error code number; other error codes start at ERROR_TABLE_BASE_krb5 + 128.

1.KRB5KDC_ERR_NONE: No error

2.KRB5KDC_ERR_NAME_EXP: Client’s entry in database has expired

3.KRB5KDC_ERR_SERVICE_EXP: Server’s entry in database has expired

4.KRB5KDC_ERR_BAD_PVNO: Requested protocol version not supported

5.KRB5KDC_ERR_C_OLD_MAST_KVNO: Client’s key is encrypted in an old master key

6.KRB5KDC_ERR_S_OLD_MAST_KVNO: Server’s key is encrypted in an old master key

7.KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN: Client not found in Kerberos database

8.KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN: Server not found in Kerberos database

9.KRB5KDC_ERR_PRINCIPAL_NOT_UNIQUE: Principal has multiple entries in Kerberos database

10.KRB5KDC_ERR_NULL_KEY: Client or server has a null key

11.KRB5KDC_ERR_CANNOT_POSTDATE: Ticket is ineligible for postdating

12.KRB5KDC_ERR_NEVER_VALID: Requested effective lifetime is negative or too short

13.KRB5KDC_ERR_POLICY: KDC policy rejects request

14.KRB5KDC_ERR_BADOPTION: KDC can’t fulfill requested option

15.KRB5KDC_ERR_ETYPE_NOSUPP: KDC has no support for encryption type

Appendix E

119