Troubleshooting Kerberos Related Products

Troubleshooting GSS-API

Troubleshooting GSS-API

This section provides troubleshooting tips for GSS-API.

Error Codes

It is the responsibility of the application programmer to check for the major and minor status values. For debugging purposes, HP recommends using the gss_display_status() function call for getting the textual representation of a GSS-API status code that can be displayed to a user or used for logging.

Major and Minor Status Values

Major status values are generic API routine errors or calling errors defined in RFC 2744.

Minor status values indicate mechanism-specific errors. Minor status values usually contain more detailed information about the error. They are not, however, portable between GSS-API implementations.

When designing portable applications, use major status values for handling errors. Use minor status values to debug applications and to display error and error-recovery information to users.

Common GSS-API Errors

Table 4-3 lists common GSS-API errors and their meanings:

Table 4-3

Common GSS-API Errors

 

 

 

 

 

 

Error

Name

Meaning

 

No.

 

 

 

 

 

 

 

 

1

GSS_S_BAD_MECH

The required

 

 

 

mechanism is

 

 

 

unsupported.

 

 

 

 

 

2

GSS_S_BAD_NAME

The name passed is

 

 

 

invalid.

 

 

 

 

96

Chapter 4