2 # lib/krb5/error_tables/krb5_err.et
4 # Copyright 1989,1990,1991,2007 by the Massachusetts Institute of Technology.
7 # Export of this software from the United States of America may
8 # require a specific license from the United States Government.
9 # It is the responsibility of any person or organization contemplating
10 # export to obtain such a license before exporting.
12 # WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
13 # distribute this software and its documentation for any purpose and
14 # without fee is hereby granted, provided that the above copyright
15 # notice appear in all copies and that both that copyright notice and
16 # this permission notice appear in supporting documentation, and that
17 # the name of M.I.T. not be used in advertising or publicity pertaining
18 # to distribution of the software without specific, written prior
19 # permission. Furthermore if you modify this software you must label
20 # your software as modified software and not distribute it in such a
21 # fashion that it might be confused with the original M.I.T. software.
22 # M.I.T. makes no representations about the suitability of
23 # this software for any purpose. It is provided "as is" without express
24 # or implied warranty.
27 # The Kerberos v5 library error code table.
28 # Protocol error codes are ERROR_TABLE_BASE_krb5 + the protocol error
29 # code number; other error codes start at ERROR_TABLE_BASE_krb5 + 128.
35 # Note: the first 128 error codes are hard-coded and must match the error
36 # numbers defined in the Kerberos protocol specification, RFC-1510 or
41 error_code KRB5KDC_ERR_NONE, "No error"
42 error_code KRB5KDC_ERR_NAME_EXP, "Client's entry in database has expired"
43 error_code KRB5KDC_ERR_SERVICE_EXP, "Server's entry in database has expired"
44 error_code KRB5KDC_ERR_BAD_PVNO, "Requested protocol version not supported"
45 error_code KRB5KDC_ERR_C_OLD_MAST_KVNO, "Client's key is encrypted in an old master key"
46 error_code KRB5KDC_ERR_S_OLD_MAST_KVNO, "Server's key is encrypted in an old master key"
47 error_code KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN, "Client not found in Kerberos database"
48 error_code KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN, "Server not found in Kerberos database"
49 error_code KRB5KDC_ERR_PRINCIPAL_NOT_UNIQUE, "Principal has multiple entries in Kerberos database"
50 error_code KRB5KDC_ERR_NULL_KEY, "Client or server has a null key"
51 error_code KRB5KDC_ERR_CANNOT_POSTDATE, "Ticket is ineligible for postdating"
52 error_code KRB5KDC_ERR_NEVER_VALID, "Requested effective lifetime is negative or too short"
53 error_code KRB5KDC_ERR_POLICY, "KDC policy rejects request"
54 error_code KRB5KDC_ERR_BADOPTION, "KDC can't fulfill requested option"
55 error_code KRB5KDC_ERR_ETYPE_NOSUPP, "KDC has no support for encryption type"
56 error_code KRB5KDC_ERR_SUMTYPE_NOSUPP, "KDC has no support for checksum type"
57 error_code KRB5KDC_ERR_PADATA_TYPE_NOSUPP, "KDC has no support for padata type"
58 error_code KRB5KDC_ERR_TRTYPE_NOSUPP, "KDC has no support for transited type"
59 error_code KRB5KDC_ERR_CLIENT_REVOKED, "Client's credentials have been revoked"
60 error_code KRB5KDC_ERR_SERVICE_REVOKED, "Credentials for server have been revoked"
61 error_code KRB5KDC_ERR_TGT_REVOKED, "TGT has been revoked"
62 error_code KRB5KDC_ERR_CLIENT_NOTYET, "Client not yet valid - try again later"
63 error_code KRB5KDC_ERR_SERVICE_NOTYET, "Server not yet valid - try again later"
64 error_code KRB5KDC_ERR_KEY_EXP, "Password has expired"
65 error_code KRB5KDC_ERR_PREAUTH_FAILED, "Preauthentication failed"
67 error_code KRB5KDC_ERR_PREAUTH_REQUIRED, "Additional pre-authentication required"
68 error_code KRB5KDC_ERR_SERVER_NOMATCH, "Requested server and ticket don't match"
69 error_code KRB5KDC_ERR_MUST_USE_USER2USER, "Server principal valid for user2user only"
70 error_code KRB5KDC_ERR_PATH_NOT_ACCEPTED, "KDC policy rejects transited path"
71 error_code KRB5KDC_ERR_SVC_UNAVAILABLE, "A service is not available that is required to process the request"
72 error_code KRB5PLACEHOLD_30, "KRB5 error code 30"
74 error_code KRB5KRB_AP_ERR_BAD_INTEGRITY, "Decrypt integrity check failed"
75 error_code KRB5KRB_AP_ERR_TKT_EXPIRED, "Ticket expired"
76 error_code KRB5KRB_AP_ERR_TKT_NYV, "Ticket not yet valid"
77 error_code KRB5KRB_AP_ERR_REPEAT, "Request is a replay"
78 error_code KRB5KRB_AP_ERR_NOT_US, "The ticket isn't for us"
79 error_code KRB5KRB_AP_ERR_BADMATCH, "Ticket/authenticator don't match"
80 error_code KRB5KRB_AP_ERR_SKEW, "Clock skew too great"
81 error_code KRB5KRB_AP_ERR_BADADDR, "Incorrect net address"
82 error_code KRB5KRB_AP_ERR_BADVERSION, "Protocol version mismatch"
83 error_code KRB5KRB_AP_ERR_MSG_TYPE, "Invalid message type"
84 error_code KRB5KRB_AP_ERR_MODIFIED, "Message stream modified"
85 error_code KRB5KRB_AP_ERR_BADORDER, "Message out of order"
86 error_code KRB5KRB_AP_ERR_ILL_CR_TKT, "Illegal cross-realm ticket"
87 error_code KRB5KRB_AP_ERR_BADKEYVER, "Key version is not available"
88 error_code KRB5KRB_AP_ERR_NOKEY, "Service key not available"
89 error_code KRB5KRB_AP_ERR_MUT_FAIL, "Mutual authentication failed"
90 error_code KRB5KRB_AP_ERR_BADDIRECTION, "Incorrect message direction"
91 error_code KRB5KRB_AP_ERR_METHOD, "Alternative authentication method required"
92 error_code KRB5KRB_AP_ERR_BADSEQ, "Incorrect sequence number in message"
93 error_code KRB5KRB_AP_ERR_INAPP_CKSUM, "Inappropriate type of checksum in message"
95 error_code KRB5KRB_AP_PATH_NOT_ACCEPTED, "Policy rejects transited path"
96 error_code KRB5KRB_ERR_RESPONSE_TOO_BIG, "Response too big for UDP, retry with TCP"
97 error_code KRB5PLACEHOLD_53, "KRB5 error code 53"
98 error_code KRB5PLACEHOLD_54, "KRB5 error code 54"
99 error_code KRB5PLACEHOLD_55, "KRB5 error code 55"
100 error_code KRB5PLACEHOLD_56, "KRB5 error code 56"
101 error_code KRB5PLACEHOLD_57, "KRB5 error code 57"
102 error_code KRB5PLACEHOLD_58, "KRB5 error code 58"
103 error_code KRB5PLACEHOLD_59, "KRB5 error code 59"
104 error_code KRB5KRB_ERR_GENERIC, "Generic error (see e-text)"
105 error_code KRB5KRB_ERR_FIELD_TOOLONG, "Field is too long for this implementation"
106 error_code KRB5KDC_ERR_CLIENT_NOT_TRUSTED, "Client not trusted"
107 error_code KRB5KDC_ERR_KDC_NOT_TRUSTED, "KDC not trusted"
108 error_code KRB5KDC_ERR_INVALID_SIG, "Invalid signature"
109 error_code KRB5KDC_ERR_DH_KEY_PARAMETERS_NOT_ACCEPTED, "Key parameters not accepted"
110 error_code KRB5KDC_ERR_CERTIFICATE_MISMATCH, "Certificate mismatch"
111 error_code KRB5KRB_AP_ERR_NO_TGT, "No ticket granting ticket"
112 error_code KRB5KDC_ERR_WRONG_REALM, "Realm not local to KDC"
113 error_code KRB5KRB_AP_ERR_USER_TO_USER_REQUIRED, "User to user required"
114 error_code KRB5KDC_ERR_CANT_VERIFY_CERTIFICATE, "Can't verify certificate"
115 error_code KRB5KDC_ERR_INVALID_CERTIFICATE, "Invalid certificate"
116 error_code KRB5KDC_ERR_REVOKED_CERTIFICATE, "Revoked certificate"
117 error_code KRB5KDC_ERR_REVOCATION_STATUS_UNKNOWN, "Revocation status unknown"
118 error_code KRB5KDC_ERR_REVOCATION_STATUS_UNAVAILABLE, "Revocation status unavailable"
119 error_code KRB5KDC_ERR_CLIENT_NAME_MISMATCH, "Client name mismatch"
120 error_code KRB5KDC_ERR_KDC_NAME_MISMATCH, "KDC name mismatch"
121 error_code KRB5KDC_ERR_INCONSISTENT_KEY_PURPOSE, "Inconsistent key purpose"
122 error_code KRB5KDC_ERR_DIGEST_IN_CERT_NOT_ACCEPTED, "Digest in certificate not accepted"
123 error_code KRB5KDC_ERR_PA_CHECKSUM_MUST_BE_INCLUDED, "Checksum must be included"
124 error_code KRB5KDC_ERR_DIGEST_IN_SIGNED_DATA_NOT_ACCEPTED, "Digest in signed-data not accepted"
125 error_code KRB5KDC_ERR_PUBLIC_KEY_ENCRYPTION_NOT_SUPPORTED, "Public key encryption not supported"
126 error_code KRB5PLACEHOLD_82, "KRB5 error code 82"
127 error_code KRB5PLACEHOLD_83, "KRB5 error code 83"
128 error_code KRB5PLACEHOLD_84, "KRB5 error code 84"
129 error_code KRB5KRB_AP_ERR_IAKERB_KDC_NOT_FOUND, "The IAKERB proxy could not find a KDC"
130 error_code KRB5KRB_AP_ERR_IAKERB_KDC_NO_RESPONSE, "The KDC did not respond to the IAKERB proxy"
131 error_code KRB5PLACEHOLD_87, "KRB5 error code 87"
132 error_code KRB5PLACEHOLD_88, "KRB5 error code 88"
133 error_code KRB5PLACEHOLD_89, "KRB5 error code 89"
134 error_code KRB5KDC_ERR_PREAUTH_EXPIRED, "Preauthentication expired"
135 error_code KRB5KDC_ERR_MORE_PREAUTH_DATA_REQUIRED, "More preauthentication data is required"
136 error_code KRB5PLACEHOLD_92, "KRB5 error code 92"
137 error_code KRB5KDC_ERR_UNKNOWN_CRITICAL_FAST_OPTION, "An unsupported critical FAST option was requested"
138 error_code KRB5PLACEHOLD_94, "KRB5 error code 94"
139 error_code KRB5PLACEHOLD_95, "KRB5 error code 95"
140 error_code KRB5PLACEHOLD_96, "KRB5 error code 96"
141 error_code KRB5PLACEHOLD_97, "KRB5 error code 97"
142 error_code KRB5PLACEHOLD_98, "KRB5 error code 98"
143 error_code KRB5PLACEHOLD_99, "KRB5 error code 99"
144 error_code KRB5KDC_ERR_NO_ACCEPTABLE_KDF, "No acceptable KDF offered"
145 error_code KRB5PLACEHOLD_101, "KRB5 error code 101"
146 error_code KRB5PLACEHOLD_102, "KRB5 error code 102"
147 error_code KRB5PLACEHOLD_103, "KRB5 error code 103"
148 error_code KRB5PLACEHOLD_104, "KRB5 error code 104"
149 error_code KRB5PLACEHOLD_105, "KRB5 error code 105"
150 error_code KRB5PLACEHOLD_106, "KRB5 error code 106"
151 error_code KRB5PLACEHOLD_107, "KRB5 error code 107"
152 error_code KRB5PLACEHOLD_108, "KRB5 error code 108"
153 error_code KRB5PLACEHOLD_109, "KRB5 error code 109"
154 error_code KRB5PLACEHOLD_110, "KRB5 error code 110"
155 error_code KRB5PLACEHOLD_111, "KRB5 error code 111"
156 error_code KRB5PLACEHOLD_112, "KRB5 error code 112"
157 error_code KRB5PLACEHOLD_113, "KRB5 error code 113"
158 error_code KRB5PLACEHOLD_114, "KRB5 error code 114"
159 error_code KRB5PLACEHOLD_115, "KRB5 error code 115"
160 error_code KRB5PLACEHOLD_116, "KRB5 error code 116"
161 error_code KRB5PLACEHOLD_117, "KRB5 error code 117"
162 error_code KRB5PLACEHOLD_118, "KRB5 error code 118"
163 error_code KRB5PLACEHOLD_119, "KRB5 error code 119"
164 error_code KRB5PLACEHOLD_120, "KRB5 error code 120"
165 error_code KRB5PLACEHOLD_121, "KRB5 error code 121"
166 error_code KRB5PLACEHOLD_122, "KRB5 error code 122"
167 error_code KRB5PLACEHOLD_123, "KRB5 error code 123"
168 error_code KRB5PLACEHOLD_124, "KRB5 error code 124"
169 error_code KRB5PLACEHOLD_125, "KRB5 error code 125"
170 error_code KRB5PLACEHOLD_126, "KRB5 error code 126"
171 error_code KRB5PLACEHOLD_127, "KRB5 error code 127"
173 error_code KRB5_ERR_RCSID, "$Id$"
175 error_code KRB5_LIBOS_BADLOCKFLAG, "Invalid flag for file lock mode"
176 error_code KRB5_LIBOS_CANTREADPWD, "Cannot read password"
177 error_code KRB5_LIBOS_BADPWDMATCH, "Password mismatch"
178 error_code KRB5_LIBOS_PWDINTR, "Password read interrupted"
180 error_code KRB5_PARSE_ILLCHAR, "Illegal character in component name"
181 error_code KRB5_PARSE_MALFORMED, "Malformed representation of principal"
183 error_code KRB5_CONFIG_CANTOPEN, "Can't open/find Kerberos configuration file"
184 error_code KRB5_CONFIG_BADFORMAT, "Improper format of Kerberos configuration file"
185 error_code KRB5_CONFIG_NOTENUFSPACE, "Insufficient space to return complete information"
187 error_code KRB5_BADMSGTYPE, "Invalid message type specified for encoding"
189 error_code KRB5_CC_BADNAME, "Credential cache name malformed"
190 error_code KRB5_CC_UNKNOWN_TYPE, "Unknown credential cache type"
191 error_code KRB5_CC_NOTFOUND, "Matching credential not found"
192 error_code KRB5_CC_END, "End of credential cache reached"
194 error_code KRB5_NO_TKT_SUPPLIED, "Request did not supply a ticket"
196 error_code KRB5KRB_AP_WRONG_PRINC, "Wrong principal in request"
197 error_code KRB5KRB_AP_ERR_TKT_INVALID, "Ticket has invalid flag set"
199 error_code KRB5_PRINC_NOMATCH, "Requested principal and ticket don't match"
200 error_code KRB5_KDCREP_MODIFIED, "KDC reply did not match expectations"
201 error_code KRB5_KDCREP_SKEW, "Clock skew too great in KDC reply"
202 error_code KRB5_IN_TKT_REALM_MISMATCH, "Client/server realm mismatch in initial ticket request"
204 error_code KRB5_PROG_ETYPE_NOSUPP, "Program lacks support for encryption type"
205 error_code KRB5_PROG_KEYTYPE_NOSUPP, "Program lacks support for key type"
206 error_code KRB5_WRONG_ETYPE, "Requested encryption type not used in message"
207 error_code KRB5_PROG_SUMTYPE_NOSUPP, "Program lacks support for checksum type"
209 error_code KRB5_REALM_UNKNOWN, "Cannot find KDC for requested realm"
210 error_code KRB5_SERVICE_UNKNOWN, "Kerberos service unknown"
211 error_code KRB5_KDC_UNREACH, "Cannot contact any KDC for requested realm"
212 error_code KRB5_NO_LOCALNAME, "No local name found for principal name"
214 error_code KRB5_MUTUAL_FAILED, "Mutual authentication failed"
216 # some of these should be combined/supplanted by system codes
218 error_code KRB5_RC_TYPE_EXISTS, "Replay cache type is already registered"
219 error_code KRB5_RC_MALLOC, "No more memory to allocate (in replay cache code)"
220 error_code KRB5_RC_TYPE_NOTFOUND, "Replay cache type is unknown"
221 error_code KRB5_RC_UNKNOWN, "Generic unknown RC error"
222 error_code KRB5_RC_REPLAY, "Message is a replay"
223 error_code KRB5_RC_IO, "Replay cache I/O operation failed"
224 error_code KRB5_RC_NOIO, "Replay cache type does not support non-volatile storage"
225 error_code KRB5_RC_PARSE, "Replay cache name parse/format error"
227 error_code KRB5_RC_IO_EOF, "End-of-file on replay cache I/O"
228 error_code KRB5_RC_IO_MALLOC, "No more memory to allocate (in replay cache I/O code)"
229 error_code KRB5_RC_IO_PERM, "Permission denied in replay cache code"
230 error_code KRB5_RC_IO_IO, "I/O error in replay cache i/o code"
231 error_code KRB5_RC_IO_UNKNOWN, "Generic unknown RC/IO error"
232 error_code KRB5_RC_IO_SPACE, "Insufficient system space to store replay information"
234 error_code KRB5_TRANS_CANTOPEN, "Can't open/find realm translation file"
235 error_code KRB5_TRANS_BADFORMAT, "Improper format of realm translation file"
237 error_code KRB5_LNAME_CANTOPEN, "Can't open/find lname translation database"
238 error_code KRB5_LNAME_NOTRANS, "No translation available for requested principal"
239 error_code KRB5_LNAME_BADFORMAT, "Improper format of translation database entry"
241 error_code KRB5_CRYPTO_INTERNAL, "Cryptosystem internal error"
243 error_code KRB5_KT_BADNAME, "Key table name malformed"
244 error_code KRB5_KT_UNKNOWN_TYPE, "Unknown Key table type"
245 error_code KRB5_KT_NOTFOUND, "Key table entry not found"
246 error_code KRB5_KT_END, "End of key table reached"
247 error_code KRB5_KT_NOWRITE, "Cannot write to specified key table"
248 error_code KRB5_KT_IOERR, "Error writing to key table"
250 error_code KRB5_NO_TKT_IN_RLM, "Cannot find ticket for requested realm"
251 error_code KRB5DES_BAD_KEYPAR, "DES key has bad parity"
252 error_code KRB5DES_WEAK_KEY, "DES key is a weak key"
254 error_code KRB5_BAD_ENCTYPE, "Bad encryption type"
255 error_code KRB5_BAD_KEYSIZE, "Key size is incompatible with encryption type"
256 error_code KRB5_BAD_MSIZE, "Message size is incompatible with encryption type"
258 error_code KRB5_CC_TYPE_EXISTS, "Credentials cache type is already registered."
259 error_code KRB5_KT_TYPE_EXISTS, "Key table type is already registered."
261 error_code KRB5_CC_IO, "Credentials cache I/O operation failed"
262 error_code KRB5_FCC_PERM, "Credentials cache permissions incorrect"
263 error_code KRB5_FCC_NOFILE, "No credentials cache found"
264 error_code KRB5_FCC_INTERNAL, "Internal credentials cache error"
265 error_code KRB5_CC_WRITE, "Error writing to credentials cache"
266 error_code KRB5_CC_NOMEM, "No more memory to allocate (in credentials cache code)"
267 error_code KRB5_CC_FORMAT, "Bad format in credentials cache"
268 error_code KRB5_CC_NOT_KTYPE, "No credentials found with supported encryption types"
270 # errors for dual tgt library calls
271 error_code KRB5_INVALID_FLAGS, "Invalid KDC option combination (library internal error)"
272 error_code KRB5_NO_2ND_TKT, "Request missing second ticket"
274 error_code KRB5_NOCREDS_SUPPLIED, "No credentials supplied to library routine"
276 # errors for sendauth (and recvauth)
278 error_code KRB5_SENDAUTH_BADAUTHVERS, "Bad sendauth version was sent"
279 error_code KRB5_SENDAUTH_BADAPPLVERS, "Bad application version was sent (via sendauth)"
280 error_code KRB5_SENDAUTH_BADRESPONSE, "Bad response (during sendauth exchange)"
281 error_code KRB5_SENDAUTH_REJECTED, "Server rejected authentication (during sendauth exchange)"
283 # errors for preauthentication
285 error_code KRB5_PREAUTH_BAD_TYPE, "Unsupported preauthentication type"
286 error_code KRB5_PREAUTH_NO_KEY, "Required preauthentication key not supplied"
287 error_code KRB5_PREAUTH_FAILED, "Generic preauthentication failure"
289 # version number errors
291 error_code KRB5_RCACHE_BADVNO, "Unsupported replay cache format version number"
292 error_code KRB5_CCACHE_BADVNO, "Unsupported credentials cache format version number"
293 error_code KRB5_KEYTAB_BADVNO, "Unsupported key table format version number"
298 error_code KRB5_PROG_ATYPE_NOSUPP, "Program lacks support for address type"
299 error_code KRB5_RC_REQUIRED, "Message replay detection requires rcache parameter"
300 error_code KRB5_ERR_BAD_HOSTNAME, "Hostname cannot be canonicalized"
301 error_code KRB5_ERR_HOST_REALM_UNKNOWN, "Cannot determine realm for host"
302 error_code KRB5_SNAME_UNSUPP_NAMETYPE, "Conversion to service principal undefined for name type"
304 error_code KRB5KRB_AP_ERR_V4_REPLY, "Initial Ticket response appears to be Version 4 error"
305 error_code KRB5_REALM_CANT_RESOLVE, "Cannot resolve network address for KDC in requested realm"
306 error_code KRB5_TKT_NOT_FORWARDABLE, "Requesting ticket can't get forwardable tickets"
307 error_code KRB5_FWD_BAD_PRINCIPAL, "Bad principal name while trying to forward credentials"
309 error_code KRB5_GET_IN_TKT_LOOP, "Looping detected inside krb5_get_in_tkt"
310 error_code KRB5_CONFIG_NODEFREALM, "Configuration file does not specify default realm"
312 error_code KRB5_SAM_UNSUPPORTED, "Bad SAM flags in obtain_sam_padata"
313 error_code KRB5_SAM_INVALID_ETYPE, "Invalid encryption type in SAM challenge"
314 error_code KRB5_SAM_NO_CHECKSUM, "Missing checksum in SAM challenge"
315 error_code KRB5_SAM_BAD_CHECKSUM, "Bad checksum in SAM challenge"
316 error_code KRB5_KT_NAME_TOOLONG, "Keytab name too long"
317 error_code KRB5_KT_KVNONOTFOUND, "Key version number for principal in key table is incorrect"
318 error_code KRB5_APPL_EXPIRED, "This application has expired"
319 error_code KRB5_LIB_EXPIRED, "This Krb5 library has expired"
321 error_code KRB5_CHPW_PWDNULL, "New password cannot be zero length"
322 error_code KRB5_CHPW_FAIL, "Password change failed"
323 error_code KRB5_KT_FORMAT, "Bad format in keytab"
325 error_code KRB5_NOPERM_ETYPE, "Encryption type not permitted"
326 error_code KRB5_CONFIG_ETYPE_NOSUPP, "No supported encryption types (config file error?)"
327 error_code KRB5_OBSOLETE_FN, "Program called an obsolete, deleted function"
329 # translated versions of getaddrinfo errors
330 error_code KRB5_EAI_FAIL, "unknown getaddrinfo failure"
331 error_code KRB5_EAI_NODATA, "no data available for host/domain name"
332 error_code KRB5_EAI_NONAME, "host/domain name not found"
333 error_code KRB5_EAI_SERVICE, "service name unknown"
335 error_code KRB5_ERR_NUMERIC_REALM, "Cannot determine realm for numeric host address"
337 error_code KRB5_ERR_BAD_S2K_PARAMS, "Invalid key generation parameters from KDC"
339 error_code KRB5_ERR_NO_SERVICE, "service not available"
341 error_code KRB5_CC_READONLY, "Ccache function not supported: read-only ccache type"
342 error_code KRB5_CC_NOSUPP, "Ccache function not supported: not implemented"
344 error_code KRB5_DELTAT_BADFORMAT, "Invalid format of Kerberos lifetime or clock skew string"
346 error_code KRB5_PLUGIN_NO_HANDLE, "Supplied data not handled by this plugin"
347 error_code KRB5_PLUGIN_OP_NOTSUPP, "Plugin does not support the operation"
349 error_code KRB5_ERR_INVALID_UTF8, "Invalid UTF-8 string"
350 error_code KRB5_ERR_FAST_REQUIRED, "FAST protected pre-authentication required but not supported by KDC"
352 error_code KRB5_LOCAL_ADDR_REQUIRED, "Auth context must contain local address"
353 error_code KRB5_REMOTE_ADDR_REQUIRED, "Auth context must contain remote address"
355 error_code KRB5_TRACE_NOSUPP, "Tracing unsupported"