Destination: USER-TASK Routing code: Weight: 99
Warranty : NO
KRBCOPY Copyright (C) '(&00)' '(&01)' All Rights Reserved
KRBLOAD
Destination: USER-TASK Routing code: Weight: 99
Warranty : NO
KRBLOAD Program '(&00)', Version '(&01)' of '(&02)' loaded from file '(&03)'
KRB0001
Destination: USER-TASK Routing code: Weight: 99
Warranty : NO
KRB0001 The kerberos ticket has expired
Meaning
The authentication ticket provided by the terminal emulation
is no more valid.
KRB0002
Destination: USER-TASK Routing code: Weight: 99
Warranty : NO
KRB0002 Authentication date invalid
Meaning
The difference between the ticket's authentication time and the
system time is too large.
Response
Take care for clock synchronisation between BS2000/OSD and the
client systems.
KRB0003
Destination: USER-TASK Routing code: Weight: 99
Warranty : NO
KRB0003 Cross Realm Authentication forbidden
Meaning
Client Realm and Server Realm must be the same because Cross Realm
Authentication is forbidden on this system.
Response
KRB0008
Destination: USER-TASK Routing code: Weight: 99
Warranty : NO
KRB0008 Decryption of authentication ticket failed
Meaning
The authentication ticket provided by the terminal emulation
can not be decrypted in BS2000 because the emulation and BS2000
are using different keys.
This can be caused either by manipulation of the ticket or
by an erroneous key definition in BS2000.
Errors in the key definition can happen if
- when specifying the key with the command /ADD-KEYTAB-ENTRY
either the host principal or the password were defined
differently in BS2000 and the authentication server (both are
case sensitive)
or if
- a password change for the server could not be completed on
both the authentication server and BS2000 during the interval
defined by the system administration and the ticket validation
fell exactly into that time interval
KRB0009
Destination: USER-TASK Routing code: Weight: 99
Warranty : NO
KRB0009 Invalid encryption type
Meaning
A Kerberos authentication ticket has been encrypted with an
encryption type not supported by BS2000.
Response
The encryption type is selected by the authentication server
according to its configuration data. Inform the administration
of your authentication server that tickets for BS2000
authentication can be encrypted with one of the following
encryption types:
DES-CBC-CRC (1)
DES-CBC-MD5 (3)
RC4-HMAC or ARCFOUR-HMAC-MD5 (23)
RC4-HMAC-EXP or ARCFOUR-HMAC-MD5-EXP (24)
AES128-CTS or AES128-CTS-HMAC-SHA1-96 (17)
AES256-CTS or AES256-CTS-HMAC-SHA1-96 (18)
KRB0010
Destination: USER-TASK Routing code: Weight: 99
Warranty : NO
KRB0010 Server principal unknown in system
Meaning
The terminal emulation has successfully requested a ticket from
the authentication server (Windows domain controller or Kerberos
key distribution server).
However, for the server name used by the terminal emulation
to identify the BS2000 system, no key is available in BS2000.
Response
Enter the command:
/SHOW-LOGON-PROTECTION <userid>,INF=*LOGON-HIST(PRINCIPAL=*Y)
to find out which server name the emulation has been using.
Then talk to the security administrator of your BS2000 system
whether this name is correct.
If the name is correct, the security administrator should
establish the corresponding key using the command
/ADD-KEYTAB-ENTRY.
Otherwise the terminal emulation has to be configured to request
tickets for the BS2000 server using the correct name.
KRB0011
Destination: USER-TASK Routing code: Weight: 99
Warranty : NO
KRB0011 The kerberos key version is unknown
Meaning
The ticket provided by the terminal emulation is using a key
version which is unknown in BS2000.
Response
The BS2000 security administrator must declare a key with the
correct version number in BS2000.
KRB0016
Destination: USER-TASK Routing code: Weight: 99
Warranty : NO
KRB0016 No valid kerberos ticket existing
Meaning
The terminal emulation could not provide a valid
authentication ticket.
Response
Please contact your software maintenance.
KRB0017
Destination: USER-TASK Routing code: Weight: 99
Warranty : NO
KRB0017 Error during parsing the kerberos ticket
Meaning
The authentication ticket provided by the terminal emulation
could not be parsed.
Response
Please contact your software maintenance.
KRB0018
Destination: USER-TASK Routing code: Weight: 99
Warranty : NO
KRB0018 Version error in terminal emulation
Meaning
The terminal emulation is using a protocol version which is
not supported by this system.
Response
Please contact the vendor of your terminal emulation.
KRB0019
Destination: USER-TASK Routing code: Weight: 99
Warranty : NO
KRB0019 Connection lost during authentication
Meaning
The terminal emulation has closed the connection during the
logon process.
KRB0020
Destination: USER-TASK Routing code: Weight: 99
Warranty : NO
KRB0020 No valid entry in the kerberos key-table existing
Meaning
The entry in the kerberos key-table for decrypting
the ticket does not exist.
Response
Please contact your systemadministration.
KRB0100
Destination: USER-TASK Routing code: Weight: 99
Warranty : NO
KRB0100 HELLO '(&00)'
Meaning
Logs the Kerberos name of the client