A.1.1 Kerberos V5 Library Error Codes

This is the Kerberos v5 library error code table. Protocol error codes are
ERROR_TABLE_BASE_krb5 + the protocol error code number; other error codes start at ERROR_TABLE_BASE_krb5 + 128.

0. KRB5KDC_ERR_NONE: No error
1. KRB5KDC_ERR_NAME_EXP: Client's entry in database has expired
2. KRB5KDC_ERR_SERVICE_EXP: Server's entry in database has expired
3. KRB5KDC_ERR_BAD_PVNO: Requested protocol version not supported
4. KRB5KDC_ERR_C_OLD_MAST_KVNO: Client's key is encrypted in an old master key
5. KRB5KDC_ERR_S_OLD_MAST_KVNO: Server's key is encrypted in an old master key
6. KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN: Client not found in Kerberos database
7. KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN: Server not found in Kerberos database
8. KRB5KDC_ERR_PRINCIPAL_NOT_UNIQUE: Principal has multiple entries in Kerberos database
9. KRB5KDC_ERR_NULL_KEY: Client or server has a null key
10. KRB5KDC_ERR_CANNOT_POSTDATE: Ticket is ineligible for postdating
11. KRB5KDC_ERR_NEVER_VALID: Requested effective lifetime is negative or too short
12. KRB5KDC_ERR_POLICY: KDC policy rejects request
13. KRB5KDC_ERR_BADOPTION: KDC can't fulfill requested option
14. KRB5KDC_ERR_ETYPE_NOSUPP: KDC has no support for encryption type
15. KRB5KDC_ERR_SUMTYPE_NOSUPP: KDC has no support for checksum type
16. KRB5KDC_ERR_PADATA_TYPE_NOSUPP: KDC has no support for padata type
17. KRB5KDC_ERR_TRTYPE_NOSUPP: KDC has no support for transited type
18. KRB5KDC_ERR_CLIENT_REVOKED: Clients credentials have been revoked
19. KRB5KDC_ERR_SERVICE_REVOKED: Credentials for server have been revoked
20. KRB5KDC_ERR_TGT_REVOKED: TGT has been revoked
21. KRB5KDC_ERR_CLIENT_NOTYET: Client not yet valid - try again later
22. KRB5KDC_ERR_SERVICE_NOTYET: Server not yet valid - try again later
23. KRB5KDC_ERR_KEY_EXP: Password has expired
24. KRB5KDC_ERR_PREAUTH_FAILED: Preauthentication failed
25. KRB5KDC_ERR_PREAUTH_REQUIRED: Additional pre-authentication required
26. KRB5KDC_ERR_SERVER_NOMATCH: Requested server and ticket don't match
27. KRB5PLACEHOLD_27: KRB5 error code 27
28. KRB5PLACEHOLD_28: KRB5 error code 28
29. KRB5PLACEHOLD_29: KRB5 error code 29
30. KRB5PLACEHOLD_30: KRB5 error code 30
31. KRB5KRB_AP_ERR_BAD_INTEGRITY: Decrypt integrity check failed
32. KRB5KRB_AP_ERR_TKT_EXPIRED: Ticket expired
33. KRB5KRB_AP_ERR_TKT_NYV: Ticket not yet valid
34. KRB5KRB_AP_ERR_REPEAT: Request is a replay
35. KRB5KRB_AP_ERR_NOT_US: The ticket isn't for us
36. KRB5KRB_AP_ERR_BADMATCH: Ticket/authenticator don't match
37. KRB5KRB_AP_ERR_SKEW: Clock skew too great
38. KRB5KRB_AP_ERR_BADADDR: Incorrect net address
39. KRB5KRB_AP_ERR_BADVERSION: Protocol version mismatch
40. KRB5KRB_AP_ERR_MSG_TYPE: Invalid message type
41. KRB5KRB_AP_ERR_MODIFIED: Message stream modified
42. KRB5KRB_AP_ERR_BADORDER: Message out of order
43. KRB5KRB_AP_ERR_ILL_CR_TKT: Illegal cross-realm ticket
44. KRB5KRB_AP_ERR_BADKEYVER: Key version is not available
45. KRB5KRB_AP_ERR_NOKEY: Service key not available
46. KRB5KRB_AP_ERR_MUT_FAIL: Mutual authentication failed
47. KRB5KRB_AP_ERR_BADDIRECTION: Incorrect message direction
48. KRB5KRB_AP_ERR_METHOD: Alternative authentication method required
49. KRB5KRB_AP_ERR_BADSEQ: Incorrect sequence number in message
50. KRB5KRB_AP_ERR_INAPP_CKSUM: Inappropriate type of checksum in message
51. KRB5KRB_AP_PATH_NOT_ACCEPTED: Policy rejects transited path
52. KRB5KRB_ERR_RESPONSE_TOO_BIG: Response too big for UDP, retry with TCP
53. KRB5PLACEHOLD_53: KRB5 error code 53
54. KRB5PLACEHOLD_54: KRB5 error code 54
55. KRB5PLACEHOLD_55: KRB5 error code 55
56. KRB5PLACEHOLD_56: KRB5 error code 56
57. KRB5PLACEHOLD_57: KRB5 error code 57
58. KRB5PLACEHOLD_58: KRB5 error code 58
59. KRB5PLACEHOLD_59: KRB5 error code 59
60. KRB5KRB_ERR_GENERIC: Generic error (see e-text)
61. KRB5KRB_ERR_FIELD_TOOLONG: Field is too long for this implementation
62. KRB5PLACEHOLD_62: KRB5 error code 62
63. KRB5PLACEHOLD_63: KRB5 error code 63
64. KRB5PLACEHOLD_64: KRB5 error code 64
65. KRB5PLACEHOLD_65: KRB5 error code 65
66. KRB5PLACEHOLD_66: KRB5 error code 66
67. KRB5PLACEHOLD_67: KRB5 error code 67
68. KRB5PLACEHOLD_68: KRB5 error code 68
69. KRB5PLACEHOLD_69: KRB5 error code 69
70. KRB5PLACEHOLD_70: KRB5 error code 70
71. KRB5PLACEHOLD_71: KRB5 error code 71
72. KRB5PLACEHOLD_72: KRB5 error code 72
73. KRB5PLACEHOLD_73: KRB5 error code 73
74. KRB5PLACEHOLD_74: KRB5 error code 74
75. KRB5PLACEHOLD_75: KRB5 error code 75
76. KRB5PLACEHOLD_76: KRB5 error code 76
77. KRB5PLACEHOLD_77: KRB5 error code 77
78. KRB5PLACEHOLD_78: KRB5 error code 78
79. KRB5PLACEHOLD_79: KRB5 error code 79
80. KRB5PLACEHOLD_80: KRB5 error code 80
81. KRB5PLACEHOLD_81: KRB5 error code 81
82. KRB5PLACEHOLD_82: KRB5 error code 82
83. KRB5PLACEHOLD_83: KRB5 error code 83
84. KRB5PLACEHOLD_84: KRB5 error code 84
85. KRB5PLACEHOLD_85: KRB5 error code 85
86. KRB5PLACEHOLD_86: KRB5 error code 86
87. KRB5PLACEHOLD_87: KRB5 error code 87
88. KRB5PLACEHOLD_88: KRB5 error code 88
89. KRB5PLACEHOLD_89: KRB5 error code 89
90. KRB5PLACEHOLD_90: KRB5 error code 90
91. KRB5PLACEHOLD_91: KRB5 error code 91
92. KRB5PLACEHOLD_92: KRB5 error code 92
93. KRB5PLACEHOLD_93: KRB5 error code 93
94. KRB5PLACEHOLD_94: KRB5 error code 94
95. KRB5PLACEHOLD_95: KRB5 error code 95
96. KRB5PLACEHOLD_96: KRB5 error code 96
97. KRB5PLACEHOLD_97: KRB5 error code 97
98. KRB5PLACEHOLD_98: KRB5 error code 98
99. KRB5PLACEHOLD_99: KRB5 error code 99
100. KRB5PLACEHOLD_100: KRB5 error code 100
101. KRB5PLACEHOLD_101: KRB5 error code 101
102. KRB5PLACEHOLD_102: KRB5 error code 102
103. KRB5PLACEHOLD_103: KRB5 error code 103
104. KRB5PLACEHOLD_104: KRB5 error code 104
105. KRB5PLACEHOLD_105: KRB5 error code 105
106. KRB5PLACEHOLD_106: KRB5 error code 106
107. KRB5PLACEHOLD_107: KRB5 error code 107
108. KRB5PLACEHOLD_108: KRB5 error code 108
109. KRB5PLACEHOLD_109: KRB5 error code 109
110. KRB5PLACEHOLD_110: KRB5 error code 110
111. KRB5PLACEHOLD_111: KRB5 error code 111
112. KRB5PLACEHOLD_112: KRB5 error code 112
113. KRB5PLACEHOLD_113: KRB5 error code 113
114. KRB5PLACEHOLD_114: KRB5 error code 114
115. KRB5PLACEHOLD_115: KRB5 error code 115
116. KRB5PLACEHOLD_116: KRB5 error code 116
117. KRB5PLACEHOLD_117: KRB5 error code 117
118. KRB5PLACEHOLD_118: KRB5 error code 118
119. KRB5PLACEHOLD_119: KRB5 error code 119
120. KRB5PLACEHOLD_120: KRB5 error code 120
121. KRB5PLACEHOLD_121: KRB5 error code 121
122. KRB5PLACEHOLD_122: KRB5 error code 122
123. KRB5PLACEHOLD_123: KRB5 error code 123
124. KRB5PLACEHOLD_124: KRB5 error code 124
125. KRB5PLACEHOLD_125: KRB5 error code 125
126. KRB5PLACEHOLD_126: KRB5 error code 126
127. KRB5PLACEHOLD_127: KRB5 error code 127
128. KRB5_ERR_RCSID: (RCS Id string for the krb5 error table)
129. KRB5_LIBOS_BADLOCKFLAG: Invalid flag for file lock mode
130. KRB5_LIBOS_CANTREADPWD: Cannot read password
131. KRB5_LIBOS_BADPWDMATCH: Password mismatch
132. KRB5_LIBOS_PWDINTR: Password read interrupted
133. KRB5_PARSE_ILLCHAR: Illegal character in component name
134. KRB5_PARSE_MALFORMED: Malformed representation of principal
135. KRB5_CONFIG_CANTOPEN: Can't open/find Kerberos configuration file
136. KRB5_CONFIG_BADFORMAT: Improper format of Kerberos configuration file
137. KRB5_CONFIG_NOTENUFSPACE: Insufficient space to return complete information
138. KRB5_BADMSGTYPE: Invalid message type specified for encoding
139. KRB5_CC_BADNAME: Credential cache name malformed
140. KRB5_CC_UNKNOWN_TYPE: Unknown credential cache type
141. KRB5_CC_NOTFOUND: Matching credential not found
142. KRB5_CC_END: End of credential cache reached
143. KRB5_NO_TKT_SUPPLIED: Request did not supply a ticket
144. KRB5KRB_AP_WRONG_PRINC: Wrong principal in request
145. KRB5KRB_AP_ERR_TKT_INVALID: Ticket has invalid flag set
146. KRB5_PRINC_NOMATCH: Requested principal and ticket don't match
147. KRB5_KDCREP_MODIFIED: KDC reply did not match expectations
148. KRB5_KDCREP_SKEW: Clock skew too great in KDC reply
149. KRB5_IN_TKT_REALM_MISMATCH: Client/server realm mismatch in initial ticket request
150. KRB5_PROG_ETYPE_NOSUPP: Program lacks support for encryption type
151. KRB5_PROG_KEYTYPE_NOSUPP: Program lacks support for key type
152. KRB5_WRONG_ETYPE: Requested encryption type not used in message
153. KRB5_PROG_SUMTYPE_NOSUPP: Program lacks support for checksum type
154. KRB5_REALM_UNKNOWN: Cannot find KDC for requested realm
155. KRB5_SERVICE_UNKNOWN: Kerberos service unknown
156. KRB5_KDC_UNREACH: Cannot contact any KDC for requested realm
157. KRB5_NO_LOCALNAME: No local name found for principal name
158. KRB5_MUTUAL_FAILED: Mutual authentication failed
159. KRB5_RC_TYPE_EXISTS: Replay cache type is already registered
160. KRB5_RC_MALLOC: No more memory to allocate (in replay cache code)
161. KRB5_RC_TYPE_NOTFOUND: Replay cache type is unknown
162. KRB5_RC_UNKNOWN: Generic unknown RC error
163. KRB5_RC_REPLAY: Message is a replay
164. KRB5_RC_IO: Replay I/O operation failed XXX
165. KRB5_RC_NOIO: Replay cache type does not support non-volatile storage
166. KRB5_RC_PARSE: Replay cache name parse/format error
167. KRB5_RC_IO_EOF: End-of-file on replay cache I/O
168. KRB5_RC_IO_MALLOC: No more memory to allocate (in replay cache I/O code)
169. KRB5_RC_IO_PERM: Permission denied in replay cache code
170. KRB5_RC_IO_IO: I/O error in replay cache i/o code
171. KRB5_RC_IO_UNKNOWN: Generic unknown RC/IO error
172. KRB5_RC_IO_SPACE: Insufficient system space to store replay information
173. KRB5_TRANS_CANTOPEN: Can't open/find realm translation file
174. KRB5_TRANS_BADFORMAT: Improper format of realm translation file
175. KRB5_LNAME_CANTOPEN: Can't open/find lname translation database
176. KRB5_LNAME_NOTRANS: No translation available for requested principal
177. KRB5_LNAME_BADFORMAT: Improper format of translation database entry
178. KRB5_CRYPTO_INTERNAL: Cryptosystem internal error
179. KRB5_KT_BADNAME: Key table name malformed
180. KRB5_KT_UNKNOWN_TYPE: Unknown Key table type
181. KRB5_KT_NOTFOUND: Key table entry not found
182. KRB5_KT_END: End of key table reached
183. KRB5_KT_NOWRITE: Cannot write to specified key table
184. KRB5_KT_IOERR: Error writing to key table
185. KRB5_NO_TKT_IN_RLM: Cannot find ticket for requested realm
186. KRB5DES_BAD_KEYPAR: DES key has bad parity
187. KRB5DES_WEAK_KEY: DES key is a weak key
188. KRB5_BAD_ENCTYPE: Bad encryption type
189. KRB5_BAD_KEYSIZE: Key size is incompatible with encryption type
190. KRB5_BAD_MSIZE: Message size is incompatible with encryption type
191. KRB5_CC_TYPE_EXISTS: Credentials cache type is already registered.
192. KRB5_KT_TYPE_EXISTS: Key table type is already registered.
193. KRB5_CC_IO: Credentials cache I/O operation failed XXX
194. KRB5_FCC_PERM: Credentials cache file permissions incorrect
195. KRB5_FCC_NOFILE: No credentials cache found
196. KRB5_FCC_INTERNAL: Internal credentials cache error
197. KRB5_CC_WRITE: Error writing to credentials cache
198. KRB5_CC_NOMEM: No more memory to allocate (in credentials cache code)
199. KRB5_CC_FORMAT: Bad format in credentials cache
200. KRB5_INVALID_FLAGS: Invalid KDC option combination (library internal error) [for dual tgt library calls]
201. KRB5_NO_2ND_TKT: Request missing second ticket [for dual tgt library calls]
202. KRB5_NOCREDS_SUPPLIED: No credentials supplied to library routine
203. KRB5_SENDAUTH_BADAUTHVERS: Bad sendauth version was sent
204. KRB5_SENDAUTH_BADAPPLVERS: Bad application version was sent (via sendauth)
205. KRB5_SENDAUTH_BADRESPONSE: Bad response (during sendauth exchange)
206. KRB5_SENDAUTH_REJECTED: Server rejected authentication (during sendauth exchange)
207. KRB5_PREAUTH_BAD_TYPE: Unsupported preauthentication type
208. KRB5_PREAUTH_NO_KEY: Required preauthentication key not supplied
209. KRB5_PREAUTH_FAILED: Generic preauthentication failure
210. KRB5_RCACHE_BADVNO: Unsupported replay cache format version number
211. KRB5_CCACHE_BADVNO: Unsupported credentials cache format version number
212. KRB5_KEYTAB_BADVNO: Unsupported key table format version number
213. KRB5_PROG_ATYPE_NOSUPP: Program lacks support for address type
214. KRB5_RC_REQUIRED: Message replay detection requires rcache parameter
215. KRB5_ERR_BAD_HOSTNAME: Hostname cannot be canonicalized
216. KRB5_ERR_HOST_REALM_UNKNOWN: Cannot determine realm for host
217. KRB5_SNAME_UNSUPP_NAMETYPE: Conversion to service principal undefined for name type
218. KRB5KRB_AP_ERR_V4_REPLY: Initial Ticket response appears to be Version 4 error
219. KRB5_REALM_CANT_RESOLVE: Cannot resolve KDC for requested realm
220. KRB5_TKT_NOT_FORWARDABLE: Requesting ticket can't get forwardable tickets
221. KRB5_FWD_BAD_PRINCIPAL: Bad principal name while trying to forward credentials
222. KRB5_GET_IN_TKT_LOOP: Looping detected inside krb5_get_in_tkt
223. KRB5_CONFIG_NODEFREALM: Configuration file does not specify default realm
224. KRB5_SAM_UNSUPPORTED: Bad SAM flags in obtain_sam_padata
225. KRB5_KT_NAME_TOOLONG: Keytab name too long
226. KRB5_KT_KVNONOTFOUND: Key version number for principal in key table is incorrect
227. KRB5_APPL_EXPIRED: This application has expired
228. KRB5_LIB_EXPIRED: This Krb5 library has expired
229. KRB5_CHPW_PWDNULL: New password cannot be zero length
230. KRB5_CHPW_FAIL: Password change failed
231. KRB5_KT_FORMAT: Bad format in keytab
232. KRB5_NOPERM_ETYPE: Encryption type not permitted
233. KRB5_CONFIG_ETYPE_NOSUPP: No supported encryption types (config file error?)
234. KRB5_OBSOLETE_FN: Program called an obsolete, deleted function
235. KRB5_EAI_FAIL: unknown getaddrinfo failure
236. KRB5_EAI_NODATA: no data available for host/domain name
237. KRB5_EAI_NONAME: host/domain name not found
238. KRB5_EAI_SERVICE: service name unknown
239. KRB5_ERR_NUMERIC_REALM: Cannot determine realm for numeric host address