kdc: Add error symbols for error logging

Having "KRB5KRB_AP_ERR_ILL_CR_TKT" in log messages is much better than
"UNKNOWN--1765328341".
This commit is contained in:
Nicolas Williams
2022-03-15 14:44:38 -05:00
parent 78162449b5
commit dcef1341d3

View File

@@ -189,7 +189,34 @@ _kdc_audit_trail(kdc_request_t r, krb5_error_code ret)
CASE(KRB5KDC_ERR_SERVICE_NOTYET);
CASE(KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN);
CASE(KRB5KDC_ERR_TRTYPE_NOSUPP);
CASE(KRB5KRB_AP_ERR_BADADDR);
CASE(KRB5KRB_AP_ERR_BADDIRECTION);
CASE(KRB5KRB_AP_ERR_BAD_INTEGRITY);
CASE(KRB5KRB_AP_ERR_BADKEYVER);
CASE(KRB5KRB_AP_ERR_BADMATCH);
CASE(KRB5KRB_AP_ERR_BADORDER);
CASE(KRB5KRB_AP_ERR_BADSEQ);
CASE(KRB5KRB_AP_ERR_BADVERSION);
CASE(KRB5KRB_AP_ERR_ILL_CR_TKT);
CASE(KRB5KRB_AP_ERR_INAPP_CKSUM);
CASE(KRB5KRB_AP_ERR_METHOD);
CASE(KRB5KRB_AP_ERR_MODIFIED);
CASE(KRB5KRB_AP_ERR_MSG_TYPE);
CASE(KRB5KRB_AP_ERR_MUT_FAIL);
CASE(KRB5KRB_AP_ERR_NOKEY);
CASE(KRB5KRB_AP_ERR_NOT_US);
CASE(KRB5KRB_AP_ERR_REPEAT);
CASE(KRB5KRB_AP_ERR_SKEW);
CASE(KRB5KRB_AP_ERR_TKT_EXPIRED);
CASE(KRB5KRB_AP_ERR_TKT_INVALID);
CASE(KRB5KRB_AP_ERR_TKT_NYV);
CASE(KRB5KRB_AP_ERR_V4_REPLY);
CASE(KRB5KRB_AP_PATH_NOT_ACCEPTED);
CASE(KRB5KRB_AP_WRONG_PRINC);
CASE(KRB5KRB_ERR_FIELD_TOOLONG);
CASE(KRB5KRB_ERR_GENERIC);
CASE(KRB5KRB_ERR_RESPONSE_TOO_BIG);
case 0:
retname = "SUCCESS";
break;