Appendix – Kerberos (krb5) Error Messages

-1765328383

KRB5KDC_ERR_NAME_EXP

Client's entry in database has expired

-1765328382

KRB5KDC_ERR_SERVICE_EXP

Server's entry in database has expired

-1765328381

KRB5KDC_ERR_BAD_PVNO

Requested protocol version not supported

-1765328380

KRB5KDC_ERR_C_OLD_MAST_KVNO

Client's key is encrypted in an old master key

-1765328379

KRB5KDC_ERR_S_OLD_MAST_KVNO

Server's key is encrypted in an old master key

-1765328378

KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN

Client not found in Kerberos database

-1765328377

KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN

Server not found in Kerberos database

-1765328376

KRB5KDC_ERR_PRINCIPAL_NOT_UNIQUE

Principal has multiple entries in Kerberos database

-1765328375

KRB5KDC_ERR_NULL_KEY

Client or server has a null key

-1765328374

KRB5KDC_ERR_CANNOT_POSTDATE

Ticket is ineligible for postdating

-1765328373

KRB5KDC_ERR_NEVER_VALID

Requested effective lifetime is negative or too short

-1765328372

KRB5KDC_ERR_POLICY

Key Distribution Center (KDC) policy rejects request

-1765328371

KRB5KDC_ERR_BADOPTION

KDC cannot fulfil requested option

-1765328370

KRB5KDC_ERR_ETYPE_NOSUPP

KDC has no support for encryption type

-1765328369

KRB5KDC_ERR_SUMTYPE_NOSUPP

KDC has no support for checksum type

-1765328368

KRB5KDC_ERR_PADATA_TYPE_NOSUPP

KDC has no support for pre-authentication data type

-1765328367

KRB5KDC_ERR_TRTYPE_NOSUPP

KDC has no support for transited type

-1765328366

KRB5KDC_ERR_CLIENT_REVOKED

Clients credentials have been revoked

-1765328365

KRB5KDC_ERR_SERVICE_REVOKED

Credentials for server have been revoked

-1765328364

KRB5KDC_ERR_TGT_REVOKED

Ticket Granting Ticket (TGT) has been revoked

-1765328363

KRB5KDC_ERR_CLIENT_NOTYET

Client not yet valid - try again later

-1765328362

KRB5KDC_ERR_SERVICE_NOTYET

Server not yet valid - try again later

-1765328361

KRB5KDC_ERR_KEY_EXP

Password has expired

-1765328360

KRB5KDC_ERR_PREAUTH_FAILED

Pre-authentication failed

-1765328359

KRB5KDC_ERR_PREAUTH_REQUIRED

Additional pre-authentication required

-1765328358

KRB5KDC_ERR_SERVER_NOMATCH

Requested server and ticket do not match

-1765328357

KRB5KDC_ERR_MUST_USE_USER2USER

User-to-User authentication is required

-1765328356

KRB5KDC_ERR_PATH_NOT_ACCEPTED

Requested cross-realm path is not accepted

-1765328355

KRB5KDC_ERR_SVC_UNAVAILABLE

Kerberos service is unavailable

-1765328354

KRB5PLACEHOLD_30

KRB5 error code 30

-1765328353

KRB5KRB_AP_ERR_BAD_INTEGRITY

Decrypt integrity check failed

-1765328352

KRB5KRB_AP_ERR_TKT_EXPIRED

Ticket expired

-1765328351

KRB5KRB_AP_ERR_TKT_NYV

Ticket not yet valid

-1765328350

KRB5KRB_AP_ERR_REPEAT

Request is a replay

-1765328349

KRB5KRB_AP_ERR_NOT_US

The ticket is not for us

-1765328348

KRB5KRB_AP_ERR_BADMATCH

Ticket/authenticator do not match

-1765328347

KRB5KRB_AP_ERR_SKEW

Time drift too great

-1765328346

KRB5KRB_AP_ERR_BADADDR

Protocol error: address validation failures in AP-REQ/AP-REP exchanges. This is returned when the network address in the Kerberos message does not match expected sender/receiver address.

-1765328345

KRB5KRB_AP_ERR_BADVERSION

Protocol version mismatch

-1765328344

KRB5KRB_AP_ERR_MSG_TYPE

Invalid message type

-1765328343

KRB5KRB_AP_ERR_MODIFIED

Message stream modified

-1765328342

KRB5KRB_AP_ERR_BADORDER

Message out of order

-1765328341

KRB5KRB_AP_ERR_ILL_CR_TKT

Illegal cross-realm ticket

-1765328340

KRB5KRB_AP_ERR_BADKEYVER

Key version is not available

-1765328339

KRB5KRB_AP_ERR_NOKEY

Service key not available

-1765328338

KRB5KRB_AP_ERR_MUT_FAIL

Mutual authentication failed

-1765328337

KRB5KRB_AP_ERR_BADDIRECTION

Incorrect message direction

-1765328336

KRB5KRB_AP_ERR_METHOD

Alternative authentication method required

-1765328335

KRB5KRB_AP_ERR_BADSEQ

Incorrect sequence number in message

-1765328334

KRB5KRB_AP_ERR_INAPP_CKSUM

Inappropriate type of checksum in message

-1765328333

KRB5KRB_AP_PATH_NOT_ACCEPTED

The application server rejected the authentication path between realms

-1765328332

KRB5KRB_ERR_RESPONSE_TOO_BIG

The response is too large for UDP

-1765328331

KRB5PLACEHOLD_53

KRB5 error code 53

-1765328330

KRB5PLACEHOLD_54

KRB5 error code 54

-1765328329

KRB5PLACEHOLD_55

KRB5 error code 55

-1765328328

KRB5PLACEHOLD_56

KRB5 error code 56

-1765328327

KRB5PLACEHOLD_57

KRB5 error code 57

-1765328326

KRB5PLACEHOLD_58

KRB5 error code 58

-1765328325

KRB5PLACEHOLD_59

KRB5 error code 59

-1765328324

KRB5KRB_ERR_GENERIC

A catch-all error for protocol-level failures that do not fit specific categories

-1765328323

KRB5KRB_ERR_FIELD_TOOLONG

Field is too long for this implementation

-1765328322

KRB5KDC_ERR_CLIENT_NOT_TRUSTED

Client certificate not trusted

-1765328321

KRB5KDC_ERR_KDC_NOT_TRUSTED

KDC certificate not trusted

-1765328320

KRB5KDC_ERR_INVALID_SIG

Invalid signature detected

-1765328319

KRB5KDC_ERR_DH_KEY_PARAMETERS_NOT_ACCEPTED

DH key parameters rejected

-1765328318

KRB5KDC_ERR_CERTIFICATE_MISMATCH

Certificate does not match Kerberos principal

-1765328317

KRB5KRB_AP_ERR_NO_TGT

Missing Ticket-Granting Ticket

-1765328316

KRB5KDC_ERR_WRONG_REALM

Incorrect realm specified

-1765328315

KRB5KRB_AP_ERR_USER_TO_USER_REQUIRED

User-to-User authentication required

-1765328314

KRB5KDC_ERR_CANT_VERIFY_CERTIFICATE

Certificate verification failed

-1765328313

KRB5KDC_ERR_INVALID_CERTIFICATE

Certificate is invalid

-1765328312

KRB5KDC_ERR_REVOKED_CERTIFICATE

Certificate has been revoked

-1765328311

KRB5KDC_ERR_REVOCATION_STATUS_UNKNOWN

Revocation status unknown

-1765328310

KRB5KDC_ERR_REVOCATION_STATUS_UNAVAILABLE

Revocation status unavailable

-1765328309

KRB5KDC_ERR_CLIENT_NAME_MISMATCH

Client name does not match certificate

-1765328308

KRB5KDC_ERR_KDC_NAME_MISMATCH

KDC name does not match certificate

-1765328307

KRB5KDC_ERR_INCONSISTENT_KEY_PURPOSE

The certificate’s key purpose does not align with the expected Kerberos usage

-1765328306

KRB5KDC_ERR_DIGEST_IN_CERT_NOT_ACCEPTED

Digest algorithm in certificate not accepted

-1765328305

KRB5KDC_ERR_PA_CHECKSUM_MUST_BE_INCLUDED

Checksum missing in pre-authentication data

-1765328304

KRB5KDC_ERR_DIGEST_IN_SIGNED_DATA_NOT_ACCEPTED

Digest algorithm in signed data not accepted

-1765328303

KRB5KDC_ERR_PUBLIC_KEY_ENCRYPTION_NOT_SUPPORTED

Public key encryption not supported

-1765328302

KRB5PLACEHOLD_82

KRB5 error code 82

-1765328301

KRB5PLACEHOLD_83

KRB5 error code 83

-1765328300

KRB5PLACEHOLD_84

KRB5 error code 84

-1765328299

KRB5KRB_AP_ERR_IAKERB_KDC_NOT_FOUND

The client could not locate a KDC during the IAKERB authentication process

-1765328298

KRB5KRB_AP_ERR_IAKERB_KDC_NO_RESPONSE

The client contacted a KDC through IAKERB, but the KDC did not respond

-1765328297

KRB5PLACEHOLD_87

KRB5 error code 87

-1765328296

KRB5PLACEHOLD_88

KRB5 error code 88

-1765328295

KRB5PLACEHOLD_89

KRB5 error code 89

-1765328294

KRB5KDC_ERR_PREAUTH_EXPIRED

Pre-authentication data expired

-1765328293

KRB5KDC_ERR_MORE_PREAUTH_DATA_REQUIRED

Additional pre-authentication data required

-1765328292

KRB5PLACEHOLD_92

KRB5 error code 92

-1765328291

KRB5KDC_ERR_UNKNOWN_CRITICAL_FAST_OPTION

The KDC encountered an unrecognized critical FAST (Flexible Authentication Secure Tunneling) option

-1765328290

KRB5PLACEHOLD_94

KRB5 error code 94

-1765328289

KRB5PLACEHOLD_95

KRB5 error code 95

-1765328288

KRB5PLACEHOLD_96

KRB5 error code 96

-1765328287

KRB5PLACEHOLD_97

KRB5 error code 97

-1765328286

KRB5PLACEHOLD_98

KRB5 error code 98

-1765328285

KRB5PLACEHOLD_99

KRB5 error code 99

-1765328284

KRB5KDC_ERR_NO_ACCEPTABLE_KDF

Unable to find a suitable key derivation function for the request

-1765328283

KRB5PLACEHOLD_101

KRB5 error code 101

-1765328282

KRB5PLACEHOLD_102

KRB5 error code 102

-1765328281

KRB5PLACEHOLD_103

KRB5 error code 103

-1765328280

KRB5PLACEHOLD_104

KRB5 error code 104

-1765328279

KRB5PLACEHOLD_105

KRB5 error code 105

-1765328278

KRB5PLACEHOLD_106

KRB5 error code 106

-1765328277

KRB5PLACEHOLD_107

KRB5 error code 107

-1765328276

KRB5PLACEHOLD_108

KRB5 error code 108

-1765328275

KRB5PLACEHOLD_109

KRB5 error code 109

-1765328274

KRB5PLACEHOLD_110

KRB5 error code 110

-1765328273

KRB5PLACEHOLD_111

KRB5 error code 111

-1765328272

KRB5PLACEHOLD_112

KRB5 error code 112

-1765328271

KRB5PLACEHOLD_113

KRB5 error code 113

-1765328270

KRB5PLACEHOLD_114

KRB5 error code 114

-1765328269

KRB5PLACEHOLD_115

KRB5 error code 115

-1765328268

KRB5PLACEHOLD_116

KRB5 error code 116

-1765328267

KRB5PLACEHOLD_117

KRB5 error code 117

-1765328266

KRB5PLACEHOLD_118

KRB5 error code 118

-1765328265

KRB5PLACEHOLD_119

KRB5 error code 119

-1765328264

KRB5PLACEHOLD_120

KRB5 error code 120

-1765328263

KRB5PLACEHOLD_121

KRB5 error code 121

-1765328262

KRB5PLACEHOLD_122

KRB5 error code 122

-1765328261

KRB5PLACEHOLD_123

KRB5 error code 123

-1765328260

KRB5PLACEHOLD_124

KRB5 error code 124

-1765328259

KRB5PLACEHOLD_125

KRB5 error code 125

-1765328258

KRB5PLACEHOLD_126

KRB5 error code 126

-1765328257

KRB5PLACEHOLD_127

KRB5 error code 127

-1765328256

KRB5_ERR_RCSID

Krb5 library-specific - this is not an actual error - it is a placeholder for version strings in the error table

-1765328255

KRB5_LIBOS_BADLOCKFLAG

Invalid flag for file lock mode

-1765328254

KRB5_LIBOS_CANTREADPWD

Cannot read password

-1765328253

KRB5_LIBOS_BADPWDMATCH

Password mismatch

-1765328252

KRB5_LIBOS_PWDINTR

Password read interrupted

-1765328251

KRB5_PARSE_ILLCHAR

Illegal character in component name

-1765328250

KRB5_PARSE_MALFORMED

Malformed representation of principal

-1765328249

KRB5_CONFIG_CANTOPEN

Cannot open/find Kerberos configuration file

-1765328248

KRB5_CONFIG_BADFORMAT

Improper format of Kerberos configuration file

-1765328247

KRB5_CONFIG_NOTENUFSPACE

Insufficient space to return complete information

-1765328246

KRB5_BADMSGTYPE

Invalid message type specified for encoding

-1765328245

KRB5_CC_BADNAME

Credential cache name malformed

-1765328244

KRB5_CC_UNKNOWN_TYPE

Unknown credential cache type

-1765328243

KRB5_CC_NOTFOUND

Matching credential not found

-1765328242

KRB5_CC_END

End of credential cache reached

-1765328241

KRB5_NO_TKT_SUPPLIED

Request did not supply a ticket

-1765328240

KRB5KRB_AP_WRONG_PRINC

Wrong principal in request

-1765328239

KRB5KRB_AP_ERR_TKT_INVALID

Ticket has invalid flag set

-1765328238

KRB5_PRINC_NOMATCH

Requested principal and ticket do not match

-1765328237

KRB5_KDCREP_MODIFIED

KDC reply did not match expectations

-1765328236

KRB5_KDCREP_SKEW

Time drift too great in KDC reply

-1765328235

KRB5_IN_TKT_REALM_MISMATCH

Client/server realm mismatch in initial ticket request

-1765328234

KRB5_PROG_ETYPE_NOSUPP

Program lacks support for encryption type

-1765328233

KRB5_PROG_KEYTYPE_NOSUPP

Program lacks support for key type

-1765328232

KRB5_WRONG_ETYPE

Requested encryption type not used in message

-1765328231

KRB5_PROG_SUMTYPE_NOSUPP

Program lacks support for checksum type

-1765328230

KRB5_REALM_UNKNOWN

Cannot find KDC for requested realm

-1765328229

KRB5_SERVICE_UNKNOWN

Kerberos service unknown

-1765328228

KRB5_KDC_UNREACH

Cannot contact any KDC for requested realm

-1765328227

KRB5_NO_LOCALNAME

No local name found for principal name

-1765328226

KRB5_MUTUAL_FAILED

Mutual authentication failed

-1765328225

KRB5_RC_TYPE_EXISTS

Replay cache type is already registered

-1765328224

KRB5_RC_MALLOC

No more memory to allocate (in replay cache code)

-1765328223

KRB5_RC_TYPE_NOTFOUND

Replay cache type is unknown

-1765328222

KRB5_RC_UNKNOWN

Generic unknown RC error

-1765328221

KRB5_RC_REPLAY

Message is a replay

-1765328220

KRB5_RC_IO

Replay cache file operations fail

-1765328219

KRB5_RC_NOIO

Replay cache type does not support non-volatile storage

-1765328218

KRB5_RC_PARSE

Replay cache name parse/format error

-1765328217

KRB5_RC_IO_EOF

End-of-file on replay cache I/O

-1765328216

KRB5_RC_IO_MALLOC

No more memory to allocate (in replay cache I/O code)

-1765328215

KRB5_RC_IO_PERM

Permission denied in replay cache code

-1765328214

KRB5_RC_IO_IO

I/O error in replay cache i/o code

-1765328213

KRB5_RC_IO_UNKNOWN

Generic unknown RC/IO error

-1765328212

KRB5_RC_IO_SPACE

Insufficient system space to store replay information

-1765328211

KRB5_TRANS_CANTOPEN

Cannot open/find realm translation file

-1765328210

KRB5_TRANS_BADFORMAT

Improper format of realm translation file

-1765328209

KRB5_LNAME_CANTOPEN

Cannot open/find lname translation database

-1765328208

KRB5_LNAME_NOTRANS

No translation available for requested principal

-1765328207

KRB5_LNAME_BADFORMAT

Improper format of translation database entry

-1765328206

KRB5_CRYPTO_INTERNAL

Cryptosystem internal error

-1765328205

KRB5_KT_BADNAME

Key table name malformed

-1765328204

KRB5_KT_UNKNOWN_TYPE

Unknown Key table type

-1765328203

KRB5_KT_NOTFOUND

Key table entry not found

-1765328202

KRB5_KT_END

End of key table reached

-1765328201

KRB5_KT_NOWRITE

Cannot write to specified key table

-1765328200

KRB5_KT_IOERR

Error writing to key table

-1765328199

KRB5_NO_TKT_IN_RLM

Cannot find ticket for requested realm

-1765328198

KRB5DES_BAD_KEYPAR

DES key has bad parity

-1765328197

KRB5DES_WEAK_KEY

DES key is a weak key

-1765328196

KRB5_BAD_ENCTYPE

Bad encryption type

-1765328195

KRB5_BAD_KEYSIZE

Key size is incompatible with encryption type

-1765328194

KRB5_BAD_MSIZE

Message size is incompatible with encryption type

-1765328193

KRB5_CC_TYPE_EXISTS

Credentials cache type is already registered.

-1765328192

KRB5_KT_TYPE_EXISTS

Key table type is already registered.

-1765328191

KRB5_CC_IO

Credential cache file read/write failures

-1765328190

KRB5_FCC_PERM

Credentials cache file permissions incorrect

-1765328189

KRB5_FCC_NOFILE

No credentials cache file found

-1765328188

KRB5_FCC_INTERNAL

Internal file credentials cache error

-1765328187

KRB5_CC_WRITE

Error writing to credentials cache file

-1765328186

KRB5_CC_NOMEM

No more memory to allocate (in credentials cache code)

-1765328185

KRB5_CC_FORMAT

Bad format in credentials cache

-1765328184

KRB5_CC_NOT_KTYPE

Key type not supported in credential cache

-1765328183

KRB5_INVALID_FLAGS

Invalid KDC option combination (library internal error)

-1765328182

KRB5_NO_2ND_TKT

Request missing second ticket

-1765328181

KRB5_NOCREDS_SUPPLIED

No credentials supplied to library routine

-1765328180

KRB5_SENDAUTH_BADAUTHVERS

Bad sendauth version was sent

-1765328179

KRB5_SENDAUTH_BADAPPLVERS

Bad application version was sent (using sendauth)

-1765328178

KRB5_SENDAUTH_BADRESPONSE

Bad response (during sendauth exchange)

-1765328177

KRB5_SENDAUTH_REJECTED

Server rejected authentication (during sendauth exchange)

-1765328176

KRB5_PREAUTH_BAD_TYPE

Unsupported preauthentication type

-1765328175

KRB5_PREAUTH_NO_KEY

Required pre-authentication key not supplied

-1765328174

KRB5_PREAUTH_FAILED

Generic pre-authentication failure

-1765328173

KRB5_RCACHE_BADVNO

Unsupported replay cache format version number

-1765328172

KRB5_CCACHE_BADVNO

Unsupported credentials cache format version number

-1765328171

KRB5_KEYTAB_BADVNO

Unsupported key table format version number

-1765328170

KRB5_PROG_ATYPE_NOSUPP

Unsupported Kerberos address type encountered

-1765328169

KRB5_RC_REQUIRED

Message replay detection requires rcache parameter

-1765328168

KRB5_ERR_BAD_HOSTNAME

Hostname cannot be canonicalized

-1765328167

KRB5_ERR_HOST_REALM_UNKNOWN

Cannot determine realm for host

-1765328166

KRB5_SNAME_UNSUPP_NAMETYPE

Conversion to service principal undefined for name type

-1765328165

KRB5KRB_AP_ERR_V4_REPLY

Initial Ticket response appears to be Version 4 error

-1765328164

KRB5_REALM_CANT_RESOLVE

Cannot resolve KDC for requested realm

-1765328163

KRB5_TKT_NOT_FORWARDABLE

Requesting ticket cannot get forwardable tickets

-1765328162

KRB5_FWD_BAD_PRINCIPAL

Bad principal name while trying to forward credentials

-1765328161

KRB5_GET_IN_TKT_LOOP

Looping detected inside krb5_get_in_tkt

-1765328160

KRB5_CONFIG_NODEFREALM

Configuration file does not specify default realm

-1765328159

KRB5_SAM_UNSUPPORTED

Bad SAM flags in obtain_sam_padata

-1765328158

KRB5_SAM_INVALID_ETYPE

The encryption type used is not valid for the Secure Authentication Module (SAM)

-1765328157

KRB5_SAM_NO_CHECKSUM

Checksum missing in SAM data

-1765328156

KRB5_SAM_BAD_CHECKSUM

Invalid checksum in SAM data

-1765328155

KRB5_KT_NAME_TOOLONG

Keytab name too long

-1765328154

KRB5_KT_KVNONOTFOUND

Key version number for principal in key table is incorrect

-1765328153

KRB5_APPL_EXPIRED

Application expired

-1765328152

KRB5_LIB_EXPIRED

Library expired

-1765328151

KRB5_CHPW_PWDNULL

A password change request failed because the new password is empty

-1765328150

KRB5_CHPW_FAIL

Password change failed

-1765328149

KRB5_KT_FORMAT

Invalid keytab format

-1765328148

KRB5_NOPERM_ETYPE

Encryption type not permitted

-1765328147

KRB5_CONFIG_ETYPE_NOSUPP

Encryption type not supported

-1765328146

KRB5_OBSOLETE_FN

Obsolete function called

-1765328145

KRB5_EAI_FAIL

Unknown getaddrinfo failure - DNS/hostname resolution failures through getaddrinfo

-1765328144

KRB5_EAI_NODATA

No data available for host/domain name - the hostname exists in DNS but has no address records (no A/AAAA records)

-1765328143

KRB5_EAI_NONAME

Host name not found

-1765328142

KRB5_EAI_SERVICE

Service name not supported

-1765328141

KRB5_ERR_NUMERIC_REALM

The specified realm name is invalid because it only consists of digits

-1765328140

KRB5_ERR_BAD_S2K_PARAMS

Invalid string-to-key parameters

-1765328139

KRB5_ERR_NO_SERVICE

Service not available

-1765328138

KRB5_CC_READONLY

Credential cache is read-only

-1765328137

KRB5_CC_NOSUPP

Operation not supported on credential cache

-1765328136

KRB5_DELTAT_BADFORMAT

Invalid time interval format

-1765328135

KRB5_PLUGIN_NO_HANDLE

No plugin could handle the request

-1765328134

KRB5_PLUGIN_OP_NOTSUPP

Plugin does not support operation

-1765328133

KRB5_ERR_INVALID_UTF8

Invalid UTF-8 encoding

-1765328132

KRB5_ERR_FAST_REQUIRED

FAST required but not used

-1765328131

KRB5_LOCAL_ADDR_REQUIRED

Local address required

-1765328130

KRB5_REMOTE_ADDR_REQUIRED

Remote address required

-1765328129

KRB5_TRACE_NOSUPP

Tracing not supported