Text about Kerberos errors.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16194 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -81,6 +81,23 @@ See also manual page for @manpage{krb5_ccache,3}
|
||||
|
||||
@subsection Kerberos errors
|
||||
|
||||
Kerberos errors are based on the com_err library. All error codes are
|
||||
32-bit signed numbers, the first 24 bits define what subsystem the
|
||||
error originates from, and last 8 bits are 255 error codes withing the
|
||||
library. Each error code have fixed string associated with it. For
|
||||
example, the error-code -1765328383 have the symbolic name
|
||||
KRB5KDC_ERR_NAME_EXP, and associated error string ``Client's entry in
|
||||
database has expired''.
|
||||
|
||||
This is a great improvment compared to just getting one of the unix
|
||||
error-codes back. However, Heimdal have an extention to pass back
|
||||
customized errors messages. Instead of getting ``Key table entry not
|
||||
found'', the user might back ``failed to find
|
||||
host/host.example.com@@EXAMLE.COM(kvno 3) in keytab /etc/krb5.keytab
|
||||
(des-cbc-crc)''. This improves the chance that the user find the
|
||||
cause of the error so you should use the customized error message
|
||||
whenever its avaible.
|
||||
|
||||
See also manual page for @manpage{krb5_get_error_string,3} and
|
||||
@manpage{krb5_get_err_text,3}.
|
||||
|
||||
|
Reference in New Issue
Block a user