xref: /onnv-gate/usr/src/lib/gss_mechs/mech_krb5/et/krb5_err.c (revision 13132:9615cdbf7b70)
10Sstevel@tonic-gate /*
2*13132SGlenn.Barry@oracle.com  * Copyright (c) 1999, 2010, Oracle and/or its affiliates. All rights reserved.
30Sstevel@tonic-gate  */
40Sstevel@tonic-gate 
50Sstevel@tonic-gate #include <locale.h>
60Sstevel@tonic-gate #include <security/cryptoki.h>
70Sstevel@tonic-gate #include <security/pkcs11.h>
80Sstevel@tonic-gate 
90Sstevel@tonic-gate const char *
krb5_error_table(long errorno)100Sstevel@tonic-gate krb5_error_table(long errorno) {
110Sstevel@tonic-gate 
120Sstevel@tonic-gate switch (errorno) {
130Sstevel@tonic-gate 	case 0:
140Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
150Sstevel@tonic-gate 			"No error"));
160Sstevel@tonic-gate 	case 1:
170Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
180Sstevel@tonic-gate 			"Client's entry in database has expired"));
190Sstevel@tonic-gate 	case 2:
200Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
210Sstevel@tonic-gate 			"Server's entry in database has expired"));
220Sstevel@tonic-gate 	case 3:
230Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
240Sstevel@tonic-gate 			"Requested protocol version not supported"));
250Sstevel@tonic-gate 	case 4:
260Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
270Sstevel@tonic-gate 			"Client's key is encrypted in an old master key"));
280Sstevel@tonic-gate 	case 5:
290Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
300Sstevel@tonic-gate 			"Server's key is encrypted in an old master key"));
310Sstevel@tonic-gate 	case 6:
320Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
330Sstevel@tonic-gate 			"Client not found in Kerberos database"));
340Sstevel@tonic-gate 	case 7:
350Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
360Sstevel@tonic-gate 			"Server not found in Kerberos database"));
370Sstevel@tonic-gate 	case 8:
380Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
390Sstevel@tonic-gate 			"Principal has multiple entries in Kerberos database"));
400Sstevel@tonic-gate 	case 9:
410Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
420Sstevel@tonic-gate 			"Client or server has a null key"));
430Sstevel@tonic-gate 	case 10:
440Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
450Sstevel@tonic-gate 			"Ticket is ineligible for postdating"));
460Sstevel@tonic-gate 	case 11:
470Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
480Sstevel@tonic-gate 		"Requested effective lifetime is negative or too short"));
490Sstevel@tonic-gate 	case 12:
500Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
510Sstevel@tonic-gate 			"KDC policy rejects request"));
520Sstevel@tonic-gate 	case 13:
530Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
540Sstevel@tonic-gate 			"KDC can't fulfill requested option"));
550Sstevel@tonic-gate 	case 14:
560Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
570Sstevel@tonic-gate 			"KDC has no support for encryption type"));
580Sstevel@tonic-gate 	case 15:
590Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
600Sstevel@tonic-gate 			"KDC has no support for checksum type"));
610Sstevel@tonic-gate 	case 16:
620Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
630Sstevel@tonic-gate 			"KDC has no support for padata type"));
640Sstevel@tonic-gate 	case 17:
650Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
660Sstevel@tonic-gate 			"KDC has no support for transited type"));
670Sstevel@tonic-gate 	case 18:
680Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
690Sstevel@tonic-gate 			"Clients credentials have been revoked"));
700Sstevel@tonic-gate 	case 19:
710Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
720Sstevel@tonic-gate 			"Credentials for server have been revoked"));
730Sstevel@tonic-gate 	case 20:
740Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
750Sstevel@tonic-gate 			"TGT has been revoked"));
760Sstevel@tonic-gate 	case 21:
770Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
780Sstevel@tonic-gate 			"Client not yet valid - try again later"));
790Sstevel@tonic-gate 	case 22:
800Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
810Sstevel@tonic-gate 			"Server not yet valid - try again later"));
820Sstevel@tonic-gate 	case 23:
830Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
840Sstevel@tonic-gate 			"Password has expired"));
850Sstevel@tonic-gate 	case 24:
860Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
870Sstevel@tonic-gate 			"Preauthentication failed"));
880Sstevel@tonic-gate 	case 25:
890Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
900Sstevel@tonic-gate 			"Additional pre-authentication required"));
910Sstevel@tonic-gate 	case 26:
920Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
930Sstevel@tonic-gate 			"Requested server and ticket don't match"));
940Sstevel@tonic-gate 	case 27:
950Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
96*13132SGlenn.Barry@oracle.com 			"Server principal valid for user2user only"));
970Sstevel@tonic-gate 	case 28:
980Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
99*13132SGlenn.Barry@oracle.com 			"KDC policy rejects transited path"));
1000Sstevel@tonic-gate 	case 29:
1010Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1027934SMark.Phalan@Sun.COM 			"A service is not available that is required to "
1037934SMark.Phalan@Sun.COM 			"process the request"));
1040Sstevel@tonic-gate 	case 30:
1050Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1060Sstevel@tonic-gate 			"KRB5 error code 30"));
1070Sstevel@tonic-gate 	case 31:
1080Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1090Sstevel@tonic-gate 			"Decrypt integrity check failed"));
1100Sstevel@tonic-gate 	case 32:
1110Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1120Sstevel@tonic-gate 			"Ticket expired"));
1130Sstevel@tonic-gate 	case 33:
1140Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1150Sstevel@tonic-gate 			"Ticket not yet valid"));
1160Sstevel@tonic-gate 	case 34:
1170Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1180Sstevel@tonic-gate 			"Request is a replay"));
1190Sstevel@tonic-gate 	case 35:
1200Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1210Sstevel@tonic-gate 			"The ticket isn't for us"));
1220Sstevel@tonic-gate 	case 36:
1230Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1240Sstevel@tonic-gate 			"Ticket/authenticator don't match"));
1250Sstevel@tonic-gate 	case 37:
1260Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1270Sstevel@tonic-gate 			"Clock skew too great"));
1280Sstevel@tonic-gate 	case 38:
1290Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1300Sstevel@tonic-gate 			"Incorrect net address"));
1310Sstevel@tonic-gate 	case 39:
1320Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1330Sstevel@tonic-gate 			"Protocol version mismatch"));
1340Sstevel@tonic-gate 	case 40:
1350Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1360Sstevel@tonic-gate 			"Invalid message type"));
1370Sstevel@tonic-gate 	case 41:
1380Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1390Sstevel@tonic-gate 			"Message stream modified"));
1400Sstevel@tonic-gate 	case 42:
1410Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1420Sstevel@tonic-gate 			"Message out of order"));
1430Sstevel@tonic-gate 	case 43:
1440Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1450Sstevel@tonic-gate 			"Illegal cross-realm ticket"));
1460Sstevel@tonic-gate 	case 44:
1470Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1480Sstevel@tonic-gate 			"Key version is not available"));
1490Sstevel@tonic-gate 	case 45:
1500Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1510Sstevel@tonic-gate 			"Service key not available"));
1520Sstevel@tonic-gate 	case 46:
1530Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1540Sstevel@tonic-gate 			"Mutual authentication failed"));
1550Sstevel@tonic-gate 	case 47:
1560Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1570Sstevel@tonic-gate 			"Incorrect message direction"));
1580Sstevel@tonic-gate 	case 48:
1590Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1600Sstevel@tonic-gate 			"Alternative authentication method required"));
1610Sstevel@tonic-gate 	case 49:
1620Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1630Sstevel@tonic-gate 			"Incorrect sequence number in message"));
1640Sstevel@tonic-gate 	case 50:
1650Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1660Sstevel@tonic-gate 			"Inappropriate type of checksum in message"));
1670Sstevel@tonic-gate 	case 51:
1680Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1697934SMark.Phalan@Sun.COM 			"Policy rejects transited path"));
1700Sstevel@tonic-gate 	case 52:
1710Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1727934SMark.Phalan@Sun.COM 			"Response too big for UDP, retry with TCP"));
1730Sstevel@tonic-gate 	case 53:
1740Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1750Sstevel@tonic-gate 			"KRB5 error code 53"));
1760Sstevel@tonic-gate 	case 54:
1770Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1780Sstevel@tonic-gate 			"KRB5 error code 54"));
1790Sstevel@tonic-gate 	case 55:
1800Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1810Sstevel@tonic-gate 			"KRB5 error code 55"));
1820Sstevel@tonic-gate 	case 56:
1830Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1840Sstevel@tonic-gate 			"KRB5 error code 56"));
1850Sstevel@tonic-gate 	case 57:
1860Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1870Sstevel@tonic-gate 			"KRB5 error code 57"));
1880Sstevel@tonic-gate 	case 58:
1890Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1900Sstevel@tonic-gate 			"KRB5 error code 58"));
1910Sstevel@tonic-gate 	case 59:
1920Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1930Sstevel@tonic-gate 			"KRB5 error code 59"));
1940Sstevel@tonic-gate 	case 60:
1950Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1960Sstevel@tonic-gate 			"Generic error (see e-text)"));
1970Sstevel@tonic-gate 	case 61:
1980Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
1990Sstevel@tonic-gate 			"Field is too long for this implementation"));
2000Sstevel@tonic-gate 	case 62:
2010Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2027934SMark.Phalan@Sun.COM 			"Client not trusted"));
2030Sstevel@tonic-gate 	case 63:
2040Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2057934SMark.Phalan@Sun.COM 			"KDC not trusted"));
2060Sstevel@tonic-gate 	case 64:
2070Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2087934SMark.Phalan@Sun.COM 			"Invalid signature"));
2090Sstevel@tonic-gate 	case 65:
2100Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2117934SMark.Phalan@Sun.COM 			"Key parameters not accepted"));
2120Sstevel@tonic-gate 	case 66:
2130Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2147934SMark.Phalan@Sun.COM 			"Certificate mismatch"));
2150Sstevel@tonic-gate 	case 67:
2160Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
217*13132SGlenn.Barry@oracle.com 			"No ticket granting ticket"));
2180Sstevel@tonic-gate 	case 68:
2190Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
220*13132SGlenn.Barry@oracle.com 			"Realm not local to KDC"));
2210Sstevel@tonic-gate 	case 69:
2220Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
223*13132SGlenn.Barry@oracle.com 			"User to user required"));
2240Sstevel@tonic-gate 	case 70:
2250Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2267934SMark.Phalan@Sun.COM 			"Can't verify certificate"));
2270Sstevel@tonic-gate 	case 71:
2280Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2297934SMark.Phalan@Sun.COM 			"Invalid certificate"));
2300Sstevel@tonic-gate 	case 72:
2310Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2327934SMark.Phalan@Sun.COM 			"Revoked certificate"));
2330Sstevel@tonic-gate 	case 73:
2340Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2357934SMark.Phalan@Sun.COM 			"Revocation status unknown"));
2360Sstevel@tonic-gate 	case 74:
2370Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2387934SMark.Phalan@Sun.COM 			"Revocation status unavailable"));
2390Sstevel@tonic-gate 	case 75:
2400Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2417934SMark.Phalan@Sun.COM 			"Client name mismatch"));
2420Sstevel@tonic-gate 	case 76:
2430Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2447934SMark.Phalan@Sun.COM 			"KDC name mismatch"));
2450Sstevel@tonic-gate 	case 77:
2460Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2477934SMark.Phalan@Sun.COM 			"Inconsistent key purpose"));
2480Sstevel@tonic-gate 	case 78:
2490Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2507934SMark.Phalan@Sun.COM 			"Digest in certificate not accepted"));
2510Sstevel@tonic-gate 	case 79:
2520Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2537934SMark.Phalan@Sun.COM 			"Checksum must be included"));
2540Sstevel@tonic-gate 	case 80:
2550Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2567934SMark.Phalan@Sun.COM 			"Digest in signed-data not accepted"));
2570Sstevel@tonic-gate 	case 81:
2580Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2597934SMark.Phalan@Sun.COM 			"Public key encryption not supported"));
2600Sstevel@tonic-gate 	case 82:
2610Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2620Sstevel@tonic-gate 			"KRB5 error code 82"));
2630Sstevel@tonic-gate 	case 83:
2640Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2650Sstevel@tonic-gate 			"KRB5 error code 83"));
2660Sstevel@tonic-gate 	case 84:
2670Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2680Sstevel@tonic-gate 			"KRB5 error code 84"));
2690Sstevel@tonic-gate 	case 85:
2700Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2710Sstevel@tonic-gate 			"KRB5 error code 85"));
2720Sstevel@tonic-gate 	case 86:
2730Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2740Sstevel@tonic-gate 			"KRB5 error code 86"));
2750Sstevel@tonic-gate 	case 87:
2760Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2770Sstevel@tonic-gate 			"KRB5 error code 87"));
2780Sstevel@tonic-gate 	case 88:
2790Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2800Sstevel@tonic-gate 			"KRB5 error code 88"));
2810Sstevel@tonic-gate 	case 89:
2820Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2830Sstevel@tonic-gate 			"KRB5 error code 89"));
2840Sstevel@tonic-gate 	case 90:
2850Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2860Sstevel@tonic-gate 			"KRB5 error code 90"));
2870Sstevel@tonic-gate 	case 91:
2880Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2890Sstevel@tonic-gate 			"KRB5 error code 91"));
2900Sstevel@tonic-gate 	case 92:
2910Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2920Sstevel@tonic-gate 			"KRB5 error code 92"));
2930Sstevel@tonic-gate 	case 93:
2940Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2950Sstevel@tonic-gate 			"KRB5 error code 93"));
2960Sstevel@tonic-gate 	case 94:
2970Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
2980Sstevel@tonic-gate 			"KRB5 error code 94"));
2990Sstevel@tonic-gate 	case 95:
3000Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3010Sstevel@tonic-gate 			"KRB5 error code 95"));
3020Sstevel@tonic-gate 	case 96:
3030Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3040Sstevel@tonic-gate 			"KRB5 error code 96"));
3050Sstevel@tonic-gate 	case 97:
3060Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3070Sstevel@tonic-gate 			"KRB5 error code 97"));
3080Sstevel@tonic-gate 	case 98:
3090Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3100Sstevel@tonic-gate 			"KRB5 error code 98"));
3110Sstevel@tonic-gate 	case 99:
3120Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3130Sstevel@tonic-gate 			"KRB5 error code 99"));
3140Sstevel@tonic-gate 	case 100:
3150Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3160Sstevel@tonic-gate 			"KRB5 error code 100"));
3170Sstevel@tonic-gate 	case 101:
3180Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3190Sstevel@tonic-gate 			"KRB5 error code 101"));
3200Sstevel@tonic-gate 	case 102:
3210Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3220Sstevel@tonic-gate 			"KRB5 error code 102"));
3230Sstevel@tonic-gate 	case 103:
3240Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3250Sstevel@tonic-gate 			"KRB5 error code 103"));
3260Sstevel@tonic-gate 	case 104:
3270Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3280Sstevel@tonic-gate 			"KRB5 error code 104"));
3290Sstevel@tonic-gate 	case 105:
3300Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3310Sstevel@tonic-gate 			"KRB5 error code 105"));
3320Sstevel@tonic-gate 	case 106:
3330Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3340Sstevel@tonic-gate 			"KRB5 error code 106"));
3350Sstevel@tonic-gate 	case 107:
3360Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3370Sstevel@tonic-gate 			"KRB5 error code 107"));
3380Sstevel@tonic-gate 	case 108:
3390Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3400Sstevel@tonic-gate 			"KRB5 error code 108"));
3410Sstevel@tonic-gate 	case 109:
3420Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3430Sstevel@tonic-gate 			"KRB5 error code 109"));
3440Sstevel@tonic-gate 	case 110:
3450Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3460Sstevel@tonic-gate 			"KRB5 error code 110"));
3470Sstevel@tonic-gate 	case 111:
3480Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3490Sstevel@tonic-gate 			"KRB5 error code 111"));
3500Sstevel@tonic-gate 	case 112:
3510Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3520Sstevel@tonic-gate 			"KRB5 error code 112"));
3530Sstevel@tonic-gate 	case 113:
3540Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3550Sstevel@tonic-gate 			"KRB5 error code 113"));
3560Sstevel@tonic-gate 	case 114:
3570Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3580Sstevel@tonic-gate 			"KRB5 error code 114"));
3590Sstevel@tonic-gate 	case 115:
3600Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3610Sstevel@tonic-gate 			"KRB5 error code 115"));
3620Sstevel@tonic-gate 	case 116:
3630Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3640Sstevel@tonic-gate 			"KRB5 error code 116"));
3650Sstevel@tonic-gate 	case 117:
3660Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3670Sstevel@tonic-gate 			"KRB5 error code 117"));
3680Sstevel@tonic-gate 	case 118:
3690Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3700Sstevel@tonic-gate 			"KRB5 error code 118"));
3710Sstevel@tonic-gate 	case 119:
3720Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3730Sstevel@tonic-gate 			"KRB5 error code 119"));
3740Sstevel@tonic-gate 	case 120:
3750Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3760Sstevel@tonic-gate 			"KRB5 error code 120"));
3770Sstevel@tonic-gate 	case 121:
3780Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3790Sstevel@tonic-gate 			"KRB5 error code 121"));
3800Sstevel@tonic-gate 	case 122:
3810Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3820Sstevel@tonic-gate 			"KRB5 error code 122"));
3830Sstevel@tonic-gate 	case 123:
3840Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3850Sstevel@tonic-gate 			"KRB5 error code 123"));
3860Sstevel@tonic-gate 	case 124:
3870Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3880Sstevel@tonic-gate 			"KRB5 error code 124"));
3890Sstevel@tonic-gate 	case 125:
3900Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3910Sstevel@tonic-gate 			"KRB5 error code 125"));
3920Sstevel@tonic-gate 	case 126:
3930Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3940Sstevel@tonic-gate 			"KRB5 error code 126"));
3950Sstevel@tonic-gate 	case 127:
3960Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
3970Sstevel@tonic-gate 			"KRB5 error code 127"));
3980Sstevel@tonic-gate 	case 128:
3990Sstevel@tonic-gate 		return (
4000Sstevel@tonic-gate 		"$Id: krb5_err.et,v 5.66 1999/12/06 21:45:03 raeburn Exp $");
4010Sstevel@tonic-gate 	case 129:
4020Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4030Sstevel@tonic-gate 			"Invalid flag for file lock mode"));
4040Sstevel@tonic-gate 	case 130:
4050Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4060Sstevel@tonic-gate 			"Cannot read password"));
4070Sstevel@tonic-gate 	case 131:
4080Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4090Sstevel@tonic-gate 			"Password mismatch"));
4100Sstevel@tonic-gate 	case 132:
4110Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4120Sstevel@tonic-gate 			"Password read interrupted"));
4130Sstevel@tonic-gate 	case 133:
4140Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4150Sstevel@tonic-gate 			"Illegal character in component name"));
4160Sstevel@tonic-gate 	case 134:
4170Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4180Sstevel@tonic-gate 			"Malformed representation of principal"));
4190Sstevel@tonic-gate 	case 135:
4200Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4210Sstevel@tonic-gate 		"Can't open/find Kerberos /etc/krb5/krb5.conf configuration "
4220Sstevel@tonic-gate 		"file"));
4230Sstevel@tonic-gate 	case 136:
4240Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4250Sstevel@tonic-gate 	"Improper format of Kerberos /etc/krb5/krb5.conf configuration file"));
4260Sstevel@tonic-gate 	case 137:
4270Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4280Sstevel@tonic-gate 			"Insufficient space to return complete information"));
4290Sstevel@tonic-gate 	case 138:
4300Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4310Sstevel@tonic-gate 			"Invalid message type specified for encoding"));
4320Sstevel@tonic-gate 	case 139:
4330Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4340Sstevel@tonic-gate 			"Credential cache name malformed"));
4350Sstevel@tonic-gate 	case 140:
4360Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4370Sstevel@tonic-gate 			"Unknown credential cache type"));
4380Sstevel@tonic-gate 	case 141:
4390Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4400Sstevel@tonic-gate 			"Matching credential not found"));
4410Sstevel@tonic-gate 	case 142:
4420Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4430Sstevel@tonic-gate 			"End of credential cache reached"));
4440Sstevel@tonic-gate 	case 143:
4450Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4460Sstevel@tonic-gate 			"Request did not supply a ticket"));
4470Sstevel@tonic-gate 	case 144:
4480Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4490Sstevel@tonic-gate 			"Wrong principal in request"));
4500Sstevel@tonic-gate 	case 145:
4510Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4520Sstevel@tonic-gate 			"Ticket has invalid flag set"));
4530Sstevel@tonic-gate 	case 146:
4540Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4550Sstevel@tonic-gate 			"Requested principal and ticket don't match"));
4560Sstevel@tonic-gate 	case 147:
4570Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4580Sstevel@tonic-gate 			"KDC reply did not match expectations"));
4590Sstevel@tonic-gate 	case 148:
4600Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4610Sstevel@tonic-gate 			"Clock skew too great in KDC reply"));
4620Sstevel@tonic-gate 	case 149:
4630Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4640Sstevel@tonic-gate 			"Client/server realm mismatch in initial ticket "
4650Sstevel@tonic-gate 			"request"));
4660Sstevel@tonic-gate 	case 150:
4670Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4680Sstevel@tonic-gate 			"Program lacks support for encryption type"));
4690Sstevel@tonic-gate 	case 151:
4700Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4710Sstevel@tonic-gate 			"Program lacks support for key type"));
4720Sstevel@tonic-gate 	case 152:
4730Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4740Sstevel@tonic-gate 			"Requested encryption type not used in message"));
4750Sstevel@tonic-gate 	case 153:
4760Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4770Sstevel@tonic-gate 			"Program lacks support for checksum type"));
4780Sstevel@tonic-gate 	case 154:
4790Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4800Sstevel@tonic-gate 			"Cannot find KDC for requested realm"));
4810Sstevel@tonic-gate 	case 155:
4820Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4830Sstevel@tonic-gate 			"Kerberos service unknown"));
4840Sstevel@tonic-gate 	case 156:
4850Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4860Sstevel@tonic-gate 			"Cannot contact any KDC for requested realm"));
4870Sstevel@tonic-gate 	case 157:
4880Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4890Sstevel@tonic-gate 			"No local name found for principal name"));
4900Sstevel@tonic-gate 	case 158:
4910Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4920Sstevel@tonic-gate 			"Mutual authentication failed"));
4930Sstevel@tonic-gate 	case 159:
4940Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4950Sstevel@tonic-gate 			"Replay cache type is already registered"));
4960Sstevel@tonic-gate 	case 160:
4970Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
4980Sstevel@tonic-gate 			"No more memory to allocate (in replay cache code)"));
4990Sstevel@tonic-gate 	case 161:
5000Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5010Sstevel@tonic-gate 			"Replay cache type is unknown"));
5020Sstevel@tonic-gate 	case 162:
5030Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5040Sstevel@tonic-gate 			"Generic unknown RC error"));
5050Sstevel@tonic-gate 	case 163:
5060Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5070Sstevel@tonic-gate 			"Message is a replay"));
5080Sstevel@tonic-gate 	case 164:
5090Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5100Sstevel@tonic-gate 			"Replay I/O operation failed XXX"));
5110Sstevel@tonic-gate 	case 165:
5120Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5130Sstevel@tonic-gate 			"Replay cache type does not support non-volatile "
5140Sstevel@tonic-gate 			"storage"));
5150Sstevel@tonic-gate 	case 166:
5160Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5170Sstevel@tonic-gate 			"Replay cache name parse/format error"));
5180Sstevel@tonic-gate 	case 167:
5190Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5200Sstevel@tonic-gate 			"End-of-file on replay cache I/O"));
5210Sstevel@tonic-gate 	case 168:
5220Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5230Sstevel@tonic-gate 			"No more memory to allocate (in replay cache I/O "
5240Sstevel@tonic-gate 			"code)"));
5250Sstevel@tonic-gate 	case 169:
5260Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5270Sstevel@tonic-gate 			"Permission denied in replay cache code"));
5280Sstevel@tonic-gate 	case 170:
5290Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5300Sstevel@tonic-gate 			"I/O error in replay cache i/o code"));
5310Sstevel@tonic-gate 	case 171:
5320Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5330Sstevel@tonic-gate 			"Generic unknown RC/IO error"));
5340Sstevel@tonic-gate 	case 172:
5350Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5360Sstevel@tonic-gate 			"Insufficient system space to store replay "
5370Sstevel@tonic-gate 			"information"));
5380Sstevel@tonic-gate 	case 173:
5390Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5400Sstevel@tonic-gate 			"Can't open/find realm translation file"));
5410Sstevel@tonic-gate 	case 174:
5420Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5430Sstevel@tonic-gate 			"Improper format of realm translation file"));
5440Sstevel@tonic-gate 	case 175:
5450Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5460Sstevel@tonic-gate 			"Can't open/find lname translation database"));
5470Sstevel@tonic-gate 	case 176:
5480Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5490Sstevel@tonic-gate 			"No translation available for requested principal"));
5500Sstevel@tonic-gate 	case 177:
5510Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5520Sstevel@tonic-gate 			"Improper format of translation database entry"));
5530Sstevel@tonic-gate 	case 178:
5540Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5550Sstevel@tonic-gate 			"Cryptosystem internal error"));
5560Sstevel@tonic-gate 	case 179:
5570Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5580Sstevel@tonic-gate 			"Key table name malformed"));
5590Sstevel@tonic-gate 	case 180:
5600Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5610Sstevel@tonic-gate 			"Unknown Key table type"));
5620Sstevel@tonic-gate 	case 181:
5630Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5640Sstevel@tonic-gate 			"Key table entry not found"));
5650Sstevel@tonic-gate 	case 182:
5660Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5670Sstevel@tonic-gate 			"End of key table reached"));
5680Sstevel@tonic-gate 	case 183:
5690Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5700Sstevel@tonic-gate 			"Cannot write to specified key table"));
5710Sstevel@tonic-gate 	case 184:
5720Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5730Sstevel@tonic-gate 			"Error writing to key table"));
5740Sstevel@tonic-gate 	case 185:
5750Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5760Sstevel@tonic-gate 			"Cannot find ticket for requested realm"));
5770Sstevel@tonic-gate 	case 186:
5780Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5790Sstevel@tonic-gate 			"DES key has bad parity"));
5800Sstevel@tonic-gate 	case 187:
5810Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5820Sstevel@tonic-gate 			"DES key is a weak key"));
5830Sstevel@tonic-gate 	case 188:
5840Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5850Sstevel@tonic-gate 			"Bad encryption type"));
5860Sstevel@tonic-gate 	case 189:
5870Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5880Sstevel@tonic-gate 			"Key size is incompatible with encryption type"));
5890Sstevel@tonic-gate 	case 190:
5900Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5910Sstevel@tonic-gate 			"Message size is incompatible with encryption type"));
5920Sstevel@tonic-gate 	case 191:
5930Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5940Sstevel@tonic-gate 			"Credentials cache type is already registered."));
5950Sstevel@tonic-gate 	case 192:
5960Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
5970Sstevel@tonic-gate 			"Key table type is already registered."));
5980Sstevel@tonic-gate 	case 193:
5990Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6000Sstevel@tonic-gate 			"Credentials cache I/O operation failed XXX"));
6010Sstevel@tonic-gate 	case 194:
6020Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6030Sstevel@tonic-gate 			"Credentials cache file permissions incorrect"));
6040Sstevel@tonic-gate 	case 195:
6050Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6060Sstevel@tonic-gate 			"No credentials cache file found"));
6070Sstevel@tonic-gate 	case 196:
6080Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6090Sstevel@tonic-gate 			"Internal file credentials cache error"));
6100Sstevel@tonic-gate 	case 197:
6110Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6120Sstevel@tonic-gate 			"Error writing to credentials cache file"));
6130Sstevel@tonic-gate 	case 198:
6140Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6150Sstevel@tonic-gate 			"No more memory to allocate (in credentials cache "
6160Sstevel@tonic-gate 			"code)"));
6170Sstevel@tonic-gate 	case 199:
6180Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6190Sstevel@tonic-gate 			"Bad format in credentials cache"));
6200Sstevel@tonic-gate 	case 200:
6210Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6220Sstevel@tonic-gate 			"No credentials found with supported encryption "
6230Sstevel@tonic-gate 			"types"));
6240Sstevel@tonic-gate 	case 201:
6250Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6260Sstevel@tonic-gate 			"Invalid KDC option combination (library internal "
6270Sstevel@tonic-gate 			"error)"));
6280Sstevel@tonic-gate 	case 202:
6290Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6300Sstevel@tonic-gate 			"Request missing second ticket"));
6310Sstevel@tonic-gate 	case 203:
6320Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6330Sstevel@tonic-gate 			"No credentials supplied to library routine"));
6340Sstevel@tonic-gate 	case 204:
6350Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6360Sstevel@tonic-gate 			"Bad sendauth version was sent"));
6370Sstevel@tonic-gate 	case 205:
6380Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6390Sstevel@tonic-gate 			"Bad application version was sent (via sendauth)"));
6400Sstevel@tonic-gate 	case 206:
6410Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6420Sstevel@tonic-gate 			"Bad response (during sendauth exchange)"));
6430Sstevel@tonic-gate 	case 207:
6440Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6450Sstevel@tonic-gate 			"Server rejected authentication (during sendauth "
6460Sstevel@tonic-gate 			"exchange)"));
6470Sstevel@tonic-gate 	case 208:
6480Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6490Sstevel@tonic-gate 			"Unsupported preauthentication type"));
6500Sstevel@tonic-gate 	case 209:
6510Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6520Sstevel@tonic-gate 			"Required preauthentication key not supplied"));
6530Sstevel@tonic-gate 	case 210:
6540Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6550Sstevel@tonic-gate 			"Generic preauthentication failure"));
6560Sstevel@tonic-gate 	case 211:
6570Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6580Sstevel@tonic-gate 			"Unsupported replay cache format version number"));
6590Sstevel@tonic-gate 	case 212:
6600Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6610Sstevel@tonic-gate 			"Unsupported credentials cache format version number"));
6620Sstevel@tonic-gate 	case 213:
6630Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6640Sstevel@tonic-gate 			"Unsupported key table format version number"));
6650Sstevel@tonic-gate 	case 214:
6660Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6670Sstevel@tonic-gate 			"Program lacks support for address type"));
6680Sstevel@tonic-gate 	case 215:
6690Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6700Sstevel@tonic-gate 			"Message replay detection requires rcache parameter"));
6710Sstevel@tonic-gate 	case 216:
6720Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6730Sstevel@tonic-gate 			"Hostname cannot be canonicalized"));
6740Sstevel@tonic-gate 	case 217:
6750Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6760Sstevel@tonic-gate 			"Cannot determine realm for host"));
6770Sstevel@tonic-gate 	case 218:
6780Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6790Sstevel@tonic-gate 			"Conversion to service principal undefined for name "
6800Sstevel@tonic-gate 			"type"));
6810Sstevel@tonic-gate 	case 219:
6820Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6830Sstevel@tonic-gate 			"Initial Ticket response appears to be Version 4 "
6840Sstevel@tonic-gate 			"error"));
6850Sstevel@tonic-gate 	case 220:
6860Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6870Sstevel@tonic-gate 			"Cannot resolve network address for KDC in requested "
6880Sstevel@tonic-gate 			"realm"));
6890Sstevel@tonic-gate 	case 221:
6900Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6910Sstevel@tonic-gate 			"Requesting ticket can't get forwardable tickets"));
6920Sstevel@tonic-gate 	case 222:
6930Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6940Sstevel@tonic-gate 			"Bad principal name while trying to forward "
6950Sstevel@tonic-gate 			"credentials"));
6960Sstevel@tonic-gate 	case 223:
6970Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
6980Sstevel@tonic-gate 			"Looping detected inside krb5_get_in_tkt"));
6990Sstevel@tonic-gate 	case 224:
7000Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
7010Sstevel@tonic-gate 			"Configuration file does not specify default realm"));
7020Sstevel@tonic-gate 	case 225:
7030Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
7040Sstevel@tonic-gate 			"Bad SAM flags in obtain_sam_padata"));
7053641Ssemery 	case 226: /* KRB5_SAM_INVALID_ETYPE */
7063641Ssemery 		return (dgettext(TEXT_DOMAIN,
7073641Ssemery 			"Invalid encryption type in SAM challenge"));
7083641Ssemery 	case 227: /* KRB5_SAM_NO_CHECKSUM */
7093641Ssemery 		return (dgettext(TEXT_DOMAIN,
7103641Ssemery 			"Missing checksum in SAM challenge"));
7113641Ssemery 	case 228: /* KRB5_SAM_BAD_CHECKSUM */
7123641Ssemery 		return (dgettext(TEXT_DOMAIN,
7133641Ssemery 			"Bad checksum in SAM challenge"));
7143641Ssemery 	case 229: /* KRB5_KT_NAME_TOOLONG */
7150Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
7160Sstevel@tonic-gate 			"Keytab name too long"));
7173641Ssemery 	case 230: /* KRB5_KT_KVNONOTFOUND */
7180Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
7190Sstevel@tonic-gate 			"Key version number for principal in key table is "
7200Sstevel@tonic-gate 			"incorrect"));
7213641Ssemery 	case 231: /* KRB5_APPL_EXPIRED */
7220Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
7230Sstevel@tonic-gate 			"This application has expired"));
7243641Ssemery 	case 232: /* KRB5_LIB_EXPIRED */
7250Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
7260Sstevel@tonic-gate 			"This Krb5 library has expired"));
7273641Ssemery 	case 233: /* KRB5_CHPW_PWDNULL */
7280Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
7290Sstevel@tonic-gate 			"New password cannot be zero length"));
7303641Ssemery 	case 234: /* KRB5_CHPW_FAIL */
7310Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
7320Sstevel@tonic-gate 			"Password change failed"));
7333641Ssemery 	case 235: /* KRB5_KT_FORMAT */
7340Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
7350Sstevel@tonic-gate 			"Bad format in keytab"));
7363641Ssemery 	case 236: /* KRB5_NOPERM_ETYPE */
7370Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
7380Sstevel@tonic-gate 			"Encryption type not permitted"));
7393641Ssemery 	case 237: /* KRB5_CONFIG_ETYPE_NOSUPP */
7400Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
7410Sstevel@tonic-gate 			"No supported encryption types (config file error?)"));
7423641Ssemery 	case 238: /* KRB5_OBSOLETE_FN */
7430Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
7440Sstevel@tonic-gate 			"Program called an obsolete, deleted function"));
7453641Ssemery 	case 239: /* KRB5_EAI_FAIL */
7460Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
7473641Ssemery 			"unknown getaddrinfo failure"));
7483641Ssemery 	case 240: /* KRB5_EAI_NODATA */
7490Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
7503641Ssemery 			"no data available for host/domain name"));
7513641Ssemery 	case 241: /* KRB5_EAI_NONAME */
7520Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
7533641Ssemery 			"host/domain name not found"));
7543641Ssemery 	case 242: /* KRB5_EAI_SERVICE */
7553641Ssemery 		return (dgettext(TEXT_DOMAIN,
7563641Ssemery 			"service name unknown"));
7573641Ssemery 	case 243: /* KRB5_ERR_NUMERIC_REALM */
7580Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
7593641Ssemery 			"Cannot determine realm for numeric host address"));
7603641Ssemery 	case 244: /* KRB5_ERR_BAD_S2K_PARAMS */
7610Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
7623641Ssemery 			"Invalid key generation parameters from KDC"));
7633641Ssemery 	case 245: /* KRB5_ERR_NO_SERVICE */
7640Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
7653641Ssemery 			"service not available"));
7663641Ssemery 	case 246: /* KRB5_CC_READONLY */
7670Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
7683641Ssemery 			"Ccache function not supported: read-only ccache "
7693641Ssemery 			"type"));
7703641Ssemery 	case 247: /* KRB5_CC_NOSUPP */
7713641Ssemery 		return (dgettext(TEXT_DOMAIN,
7723641Ssemery 			"Ccache function not supported: not implemented"));
7738089SMark.Phalan@Sun.COM 	case 248: /* KRB5_RC_BADNAME */
7740Sstevel@tonic-gate 		return (dgettext(TEXT_DOMAIN,
7753641Ssemery 			"Bad replay cache name"));
7768089SMark.Phalan@Sun.COM 	case 249: /* KRB5_CONF_NOT_CONFIGURED */
777781Sgtb 		return (dgettext(TEXT_DOMAIN,
7783641Ssemery 			"krb5 conf file not configured"));
7798089SMark.Phalan@Sun.COM 	case 250: /* PKCS_ERR */
7803641Ssemery 		return (dgettext(TEXT_DOMAIN,
7813641Ssemery 			"Error in the PKCS 11 library calls"));
7828089SMark.Phalan@Sun.COM 	case 251: /* KRB5_DELTAT_BADFORMAT */
7833641Ssemery 		return (dgettext(TEXT_DOMAIN,
7843641Ssemery 			"Delta time bad format"));
7850Sstevel@tonic-gate 	default:
7860Sstevel@tonic-gate 		return ("unknown error");
7870Sstevel@tonic-gate 	}
7880Sstevel@tonic-gate }
789