KRB

KRBCOPY

Destination: USER-TASK             Routing code:                     Weight: 99

Warranty   : NO

KRBCOPY   Copyright (C) '(&00)' '(&01)' All Rights Reserved

KRBLOAD

Destination: USER-TASK             Routing code:                     Weight: 99

Warranty   : NO

KRBLOAD   Program '(&00)', Version '(&01)' of '(&02)' loaded from file '(&03)'

KRB0001

Destination: USER-TASK             Routing code:                     Weight: 99

Warranty   : NO

KRB0001   The kerberos ticket has expired

Meaning

The authentication ticket provided by the terminal emulation
is no more valid.

KRB0002

Destination: USER-TASK             Routing code:                     Weight: 99

Warranty   : NO

KRB0002   Authentication date invalid

Meaning

The difference between the ticket's authentication time and the
system time is too large.

Response

Take care for clock synchronisation between BS2000/OSD and the
client systems.

KRB0003

Destination: USER-TASK             Routing code:                     Weight: 99

Warranty   : NO

KRB0003   Cross Realm Authentication forbidden

Meaning

Client Realm and Server Realm must be the same because Cross Realm
Authentication is forbidden on this system.

Response

KRB0008

Destination: USER-TASK             Routing code:                     Weight: 99

Warranty   : NO

KRB0008   Decryption of authentication ticket failed

Meaning

The authentication ticket provided by the terminal emulation
can not be decrypted in BS2000 because the emulation and BS2000
are using different keys.

This can be caused either by manipulation of the ticket or
by an erroneous key definition in BS2000.

Errors in the key definition can happen if
- when specifying the key with the command /ADD-KEYTAB-ENTRY
   either the host principal or the password were defined
   differently in BS2000 and the authentication server (both are
   case sensitive)
or if
- a password change for the server could not be completed on
   both the authentication server and BS2000 during the interval
   defined by the system administration and the ticket validation
   fell exactly into that time interval

KRB0009

Destination: USER-TASK             Routing code:                     Weight: 99

Warranty   : NO

KRB0009   Invalid encryption type

Meaning

A Kerberos authentication ticket has been encrypted with an
encryption type not supported by BS2000.

Response

The encryption type is selected by the authentication server
according to its configuration data.  Inform the administration
of your authentication server that tickets for BS2000
authentication can be encrypted with one of the following
encryption types:
    DES-CBC-CRC (1)
    DES-CBC-MD5 (3)
    DES3-CBC-MD5 (5)
    RC4-HMAC oder ARCFOUR-HMAC-MD5 (23)

KRB0010

Destination: USER-TASK             Routing code:                     Weight: 99

Warranty   : NO

KRB0010   Server principal unknown in system

Meaning

The terminal emulation has successfully requested a ticket from
the authentication server (Windows domain controller or Kerberos
key distribution server).
However, for the server name used by the terminal emulation
to identify the BS2000 system, no key is available in BS2000.

Response

Enter the command:
    /SHOW-LOGON-PROTECTION <userid>,INF=*LOGON-HIST(PRINCIPAL=*Y)
to find out which server name the emulation has been using.
Then talk to the security administrator of your BS2000 system
whether this name is correct.

If the name is correct, the security administrator should
establish the corresponding key using the command
/ADD-KEYTAB-ENTRY.

Otherwise the terminal emulation has to be configured to request
tickets for the BS2000 server using the correct name.

KRB0011

Destination: USER-TASK             Routing code:                     Weight: 99

Warranty   : NO

KRB0011   The kerberos key version is unknown

Meaning

The ticket provided by the terminal emulation is using a key
version which is unknown in BS2000.

Response

The BS2000 security administrator must declare a key with the
correct version number in BS2000.

KRB0016

Destination: USER-TASK             Routing code:                     Weight: 99

Warranty   : NO

KRB0016   No valid kerberos ticket existing

Meaning

The terminal emulation could not provide a valid
authentication ticket.

Response

Please contact your software maintenance.

KRB0017

Destination: USER-TASK             Routing code:                     Weight: 99

Warranty   : NO

KRB0017   Error during parsing the kerberos ticket

Meaning

The authentication ticket provided by the terminal emulation
could not be parsed.

Response

Please contact your software maintenance.

KRB0018

Destination: USER-TASK             Routing code:                     Weight: 99

Warranty   : NO

KRB0018   Version error in terminal emulation

Meaning

The terminal emulation is using a protocol version which is
not supported by this system.

Response

Please contact the vendor of your terminal emulation.

KRB0019

Destination: USER-TASK             Routing code:                     Weight: 99

Warranty   : NO

KRB0019   Connection lost during authentication

Meaning

The terminal emulation has closed the connection during the
logon process.

KRB0020

Destination: USER-TASK             Routing code:                     Weight: 99

Warranty   : NO

KRB0020   No valid entry in the kerberos key-table existing

Meaning

The entry in the kerberos key-table for decrypting
the ticket does not exist.

Response

Please contact your systemadministration.