errcode|0|KDC_ERR_NONE|rfc4120 7.5.8|No error||
errcode|1|KDC_ERR_NAME_EXP|rfc4120 7.5.8|Client's entry in database has expired||
errcode|2|KDC_ERR_SERVICE_EXP|rfc4120 7.5.8|Server's entry in database has expired||
errcode|3|KDC_ERR_BAD_PVNO|rfc4120 7.5.8|Requested protocol version number not supported||
errcode|4|KDC_ERR_C_OLD_MAST_KVNO|rfc4120 7.5.8|Client's key encrypted in old master key||
errcode|5|KDC_ERR_S_OLD_MAST_KVNO|rfc4120 7.5.8|Server's key encrypted in old master key||
errcode|6|KDC_ERR_C_PRINCIPAL_UNKNOWN|rfc4120 7.5.8|Client not found in Kerberos database||
errcode|7|KDC_ERR_S_PRINCIPAL_UNKNOWN|rfc4120 7.5.8|Server not found in Kerberos database||
errcode|8|KDC_ERR_PRINCIPAL_NOT_UNIQUE|rfc4120 7.5.8|Multiple principal entries in database||
errcode|9|KDC_ERR_NULL_KEY|rfc4120 7.5.8|The client or server has a null key||
errcode|10|KDC_ERR_CANNOT_POSTDATE|rfc4120 7.5.8|Ticket not eligible for postdating||
errcode|11|KDC_ERR_NEVER_VALID|rfc4120 7.5.8|Requested starttime is later than end time||
errcode|12|KDC_ERR_POLICY|rfc4120 7.5.8|KDC policy rejects request||
errcode|13|KDC_ERR_BADOPTION|rfc4120 7.5.8|KDC cannot accommodate requested option||
errcode|14|KDC_ERR_ETYPE_NOSUPP|rfc4120 7.5.8|KDC has no support for encryption type||
errcode|15|KDC_ERR_SUMTYPE_NOSUPP|rfc4120 7.5.8|KDC has no support for checksum type||
errcode|16|KDC_ERR_PADATA_TYPE_NOSUPP|rfc4120 7.5.8|KDC has no support for padata type||
errcode|17|KDC_ERR_TRTYPE_NOSUPP|rfc4120 7.5.8|KDC has no support for transited type||
errcode|18|KDC_ERR_CLIENT_REVOKED|rfc4120 7.5.8|Clients credentials have been revoked||
errcode|19|KDC_ERR_SERVICE_REVOKED|rfc4120 7.5.8|Credentials for server have been revoked||
errcode|20|KDC_ERR_TGT_REVOKED|rfc4120 7.5.8|TGT has been revoked||
errcode|21|KDC_ERR_CLIENT_NOTYET|rfc4120 7.5.8|Client not yet valid; try again later||
errcode|22|KDC_ERR_SERVICE_NOTYET|rfc4120 7.5.8|Server not yet valid; try again later||
errcode|23|KDC_ERR_KEY_EXPIRED|rfc4120 7.5.8|Password has expired; change password to reset||
errcode|24|KDC_ERR_PREAUTH_FAILED|rfc4120 7.5.8|Pre-authentication information was invalid||
errcode|25|KDC_ERR_PREAUTH_REQUIRED|rfc4120 7.5.8|Additional pre-authentication required||
errcode|26|KDC_ERR_SERVER_NOMATCH|rfc4120 7.5.8|Requested server and ticket don't match||
errcode|27|KDC_ERR_MUST_USE_USER2USER|rfc4120 7.5.8|Server principal valid for user2user only||
errcode|28|KDC_ERR_PATH_NOT_ACCEPTED|rfc4120 7.5.8|KDC Policy rejects transited path||
errcode|29|KDC_ERR_SVC_UNAVAILABLE|rfc4120 7.5.8|A service is not available||
errcode|31|KRB_AP_ERR_BAD_INTEGRITY|rfc4120 7.5.8|Integrity check on decrypted field failed||
errcode|32|KRB_AP_ERR_TKT_EXPIRED|rfc4120 7.5.8|Ticket expired||
errcode|33|KRB_AP_ERR_TKT_NYV|rfc4120 7.5.8|Ticket not yet valid||
errcode|34|KRB_AP_ERR_REPEAT|rfc4120 7.5.8|Request is a replay||
errcode|35|KRB_AP_ERR_NOT_US|rfc4120 7.5.8|The ticket isn't for us||
errcode|36|KRB_AP_ERR_BADMATCH|rfc4120 7.5.8|Ticket and authenticator don't match||
errcode|37|KRB_AP_ERR_SKEW|rfc4120 7.5.8|Clock skew too great||
errcode|38|KRB_AP_ERR_BADADDR|rfc4120 7.5.8|Incorrect net address||
errcode|39|KRB_AP_ERR_BADVERSION|rfc4120 7.5.8|Protocol version mismatch||
errcode|40|KRB_AP_ERR_MSG_TYPE|rfc4120 7.5.8|Invalid msg type||
errcode|41|KRB_AP_ERR_MODIFIED|rfc4120 7.5.8|Message stream modified||
errcode|42|KRB_AP_ERR_BADORDER|rfc4120 7.5.8|Message out of order||
errcode|44|KRB_AP_ERR_BADKEYVER|rfc4120 7.5.8|Specified version of key is not available||
errcode|45|KRB_AP_ERR_NOKEY|rfc4120 7.5.8|Service key not available||
errcode|46|KRB_AP_ERR_MUT_FAIL|rfc4120 7.5.8|Mutual authentication failed||
errcode|47|KRB_AP_ERR_BADDIRECTION|rfc4120 7.5.8|Incorrect message direction||
errcode|48|KRB_AP_ERR_METHOD|rfc4120 7.5.8|Alternative authentication method required||
errcode|49|KRB_AP_ERR_BADSEQ|rfc4120 7.5.8|Incorrect sequence number in message||
errcode|50|KRB_AP_ERR_INAPP_CKSUM|rfc4120 7.5.8|Inappropriate type of checksum in message||
errcode|51|KRB_AP_PATH_NOT_ACCEPTED|rfc4120 7.5.8|Policy rejects transited path||
errcode|52|KRB_ERR_RESPONSE_TOO_BIG|rfc4120 7.5.8|Response too big for UDP; retry with TCP||
errcode|60|KRB_ERR_GENERIC|rfc4120 7.5.8|Generic error (description in e-text)||
errcode|61|KRB_ERR_FIELD_TOOLONG|rfc4120 7.5.8|Field is too long for this implementation||
errcode|62|KDC_ERROR_CLIENT_NOT_TRUSTED|rfc4120 7.5.8|Reserved for PKINIT||
errcode|63|KDC_ERROR_KDC_NOT_TRUSTED|rfc4120 7.5.8|Reserved for PKINIT||
errcode|64|KDC_ERROR_INVALID_SIG|rfc4120 7.5.8|Reserved for PKINIT||
errcode|65|KDC_ERR_KEY_TOO_WEAK|rfc4120 7.5.8|Reserved for PKINIT||
errcode|66|KDC_ERR_CERTIFICATE_MISMATCH|rfc4120 7.5.8|Reserved for PKINIT||
errcode|67|KRB_AP_ERR_NO_TGT|rfc4120 7.5.8|No TGT available to validate USER-TO-USER||
errcode|68|KDC_ERR_WRONG_REALM|rfc4120 7.5.8|Reserved for future use||
errcode|69|KRB_AP_ERR_USER_TO_USER_REQUIRED|rfc4120 7.5.8|Ticket must be for USER-TO-USER||
errcode|70|KDC_ERR_CANT_VERIFY_CERTIFICATE|rfc4120 7.5.8|Reserved for PKINIT||
errcode|71|KDC_ERR_INVALID_CERTIFICATE|rfc4120 7.5.8|Reserved for PKINIT||
errcode|72|KDC_ERR_REVOKED_CERTIFICATE|rfc4120 7.5.8|Reserved for PKINIT||
errcode|73|KDC_ERR_REVOCATION_STATUS_UNKNOWN|rfc4120 7.5.8|Reserved for PKINIT||
errcode|74|KDC_ERR_REVOCATION_STATUS_UNAVAILABLE|rfc4120 7.5.8|Reserved for PKINIT||
errcode|75|KDC_ERR_CLIENT_NAME_MISMATCH|rfc4120 7.5.8|Reserved for PKINIT||
errcode|76|KDC_ERR_KDC_NAME_MISMATCH|rfc4120 7.5.8|Reserved for PKINIT||
