| code | message | meaning |
| 0×6 | KDC_ERR_C_PRINCIPAL_UNKNOWN: | Client not found in Kerberos database |
| 0×7 | KDC_ERR_S_PRINCIPAL_UNKNOWN: | Server not found in Kerberos database |
| 0×8 | KDC_ERR_PRINCIPAL_NOT_UNIQUE: | Multiple principal entries in database |
| 0xA | KDC_ERR_CANNOT_POSTDATE: | Ticket not eligible for postdating |
| 0xC | KDC_ERR_POLICY: | KDC policy rejects request |
| 0xD | KDC_ERR_BADOPTION: | KDC cannot accommodate requested option |
| 0xE | KDC_ERR_ETYPE_NOTSUPP: | KDC has no support for encryption type |
| 0xF | KDC_ERR_SUMTYPE_NOSUPP: | KDC has no support for checksum type |
| 0×12 | KDC_ERR_CLIENT_REVOKED: | Clients credentials have been revoked |
| 0×17 | KDC_ERR_KEY_EXPIRED: | Password has expired change password to reset |
| 0×19 | KDC_ERR_PREAUTH_REQUIRED: | Additional pre-authentication required |
| 0x1B | KDC_ERR_MUST_USE_USER2USER: | principal valid for user2user only |
| 0x1C | KDC_ERR_PATH_NOT_ACCEPTED: | KDC Policy rejects transited path |
| 0x1D | KDC_ERR_SVC_UNAVAILABLE: | A service is not available |
| 0x1F | KRB_AP_ERR_BAD_INTEGRITY: | Integrity check on decrypted field failed |
| 0×20 | KRB_AP_ERR_TKT_EXPIRED: | Ticket expired |
| 0×21 | KRB_AP_ERR_TKT_NYV: | Ticket not yet valid |
| 0×22 | KRB_AP_ERR_REPEAT: | Request is a replay |
| 0×23 | KRB_AP_ERR_NOT_US: | The ticket isn’t for us |
| 0×24 | KRB_AP_ERR_BADMATCH: | Ticket and authenticator don’t match |
| 0×25 | KRB_AP_ERR_SKEW: | Clock skew too great |
| 0×29 | KRB_AP_ERR_MODIFIED: | Message stream modified |
| 0×34 | KRB_ERR_RESPONSE_TOO_BIG: | Response too big for UDP, retry with TCP |
| 0x3C | KRB_ERR_GENERIC: | Generic error |
You might also enjoy:
