Text about Kerberos errors.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16194 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
		@@ -81,6 +81,23 @@ See also manual page for @manpage{krb5_ccache,3}
 | 
				
			|||||||
 | 
					
 | 
				
			||||||
@subsection Kerberos errors
 | 
					@subsection Kerberos errors
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					Kerberos errors are based on the com_err library.  All error codes are
 | 
				
			||||||
 | 
					32-bit signed numbers, the first 24 bits define what subsystem the
 | 
				
			||||||
 | 
					error originates from, and last 8 bits are 255 error codes withing the
 | 
				
			||||||
 | 
					library.  Each error code have fixed string associated with it.  For
 | 
				
			||||||
 | 
					example, the error-code -1765328383 have the symbolic name
 | 
				
			||||||
 | 
					KRB5KDC_ERR_NAME_EXP, and associated error string ``Client's entry in
 | 
				
			||||||
 | 
					database has expired''.
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					This is a great improvment compared to just getting one of the unix
 | 
				
			||||||
 | 
					error-codes back.  However, Heimdal have an extention to pass back
 | 
				
			||||||
 | 
					customized errors messages.  Instead of getting ``Key table entry not
 | 
				
			||||||
 | 
					found'', the user might back ``failed to find
 | 
				
			||||||
 | 
					host/host.example.com@@EXAMLE.COM(kvno 3) in keytab /etc/krb5.keytab
 | 
				
			||||||
 | 
					(des-cbc-crc)''.  This improves the chance that the user find the
 | 
				
			||||||
 | 
					cause of the error so you should use the customized error message
 | 
				
			||||||
 | 
					whenever its avaible.
 | 
				
			||||||
 | 
					
 | 
				
			||||||
See also manual page for @manpage{krb5_get_error_string,3} and
 | 
					See also manual page for @manpage{krb5_get_error_string,3} and
 | 
				
			||||||
@manpage{krb5_get_err_text,3}.
 | 
					@manpage{krb5_get_err_text,3}.
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user