## KRBCOPY

Destination: USER-TASK Routing code: Weight: 99

Warranty : NO

KRBCOPY Copyright (C) '(&00)' '(&01)' All Rights Reserved

## KRBLOAD

Destination: USER-TASK Routing code: Weight: 99

Warranty : NO

KRBLOAD Program '(&00)', Version '(&01)' of '(&02)' loaded from file '(&03)'

## KRB0001

Destination: USER-TASK Routing code: Weight: 99

Warranty : NO

KRB0001 The kerberos ticket has expired

### Meaning

The authentication ticket provided by the terminal emulation
is no more valid.

## KRB0002

Destination: USER-TASK Routing code: Weight: 99

Warranty : NO

KRB0002 Authentication date invalid

### Meaning

The difference between the ticket's authentication time and the
system time is too large.

### Response

Take care for clock synchronisation between BS2000/OSD and the
client systems.

## KRB0003

Destination: USER-TASK Routing code: Weight: 99

Warranty : NO

KRB0003 Cross Realm Authentication forbidden

### Meaning

Client Realm and Server Realm must be the same because Cross Realm
Authentication is forbidden on this system.

### Response

## KRB0008

Destination: USER-TASK Routing code: Weight: 99

Warranty : NO

KRB0008 Decryption of authentication ticket failed

### Meaning

The authentication ticket provided by the terminal emulation
can not be decrypted in BS2000 because the emulation and BS2000
are using different keys.
This can be caused either by manipulation of the ticket or
by an erroneous key definition in BS2000.
Errors in the key definition can happen if
- when specifying the key with the command /ADD-KEYTAB-ENTRY
either the host principal or the password were defined
differently in BS2000 and the authentication server (both are
case sensitive)
or if
- a password change for the server could not be completed on
both the authentication server and BS2000 during the interval
defined by the system administration and the ticket validation
fell exactly into that time interval

## KRB0009

Destination: USER-TASK Routing code: Weight: 99

Warranty : NO

KRB0009 Invalid encryption type

### Meaning

A Kerberos authentication ticket has been encrypted with an
encryption type not supported by BS2000.

### Response

The encryption type is selected by the authentication server
according to its configuration data. Inform the administration
of your authentication server that tickets for BS2000
authentication can be encrypted with one of the following
encryption types:
DES-CBC-CRC (1)
DES-CBC-MD5 (3)
RC4-HMAC or ARCFOUR-HMAC-MD5 (23)
RC4-HMAC-EXP or ARCFOUR-HMAC-MD5-EXP (24)
AES128-CTS or AES128-CTS-HMAC-SHA1-96 (17)
AES256-CTS or AES256-CTS-HMAC-SHA1-96 (18)

## KRB0010

Destination: USER-TASK Routing code: Weight: 99

Warranty : NO

KRB0010 Server principal unknown in system

### Meaning

The terminal emulation has successfully requested a ticket from
the authentication server (Windows domain controller or Kerberos
key distribution server).
However, for the server name used by the terminal emulation
to identify the BS2000 system, no key is available in BS2000.

### Response

Enter the command:
/SHOW-LOGON-PROTECTION <userid>,INF=*LOGON-HIST(PRINCIPAL=*Y)
to find out which server name the emulation has been using.
Then talk to the security administrator of your BS2000 system
whether this name is correct.
If the name is correct, the security administrator should
establish the corresponding key using the command
/ADD-KEYTAB-ENTRY.
Otherwise the terminal emulation has to be configured to request
tickets for the BS2000 server using the correct name.

## KRB0011

Destination: USER-TASK Routing code: Weight: 99

Warranty : NO

KRB0011 The kerberos key version is unknown

### Meaning

The ticket provided by the terminal emulation is using a key
version which is unknown in BS2000.

### Response

The BS2000 security administrator must declare a key with the
correct version number in BS2000.

## KRB0016

Destination: USER-TASK Routing code: Weight: 99

Warranty : NO

KRB0016 No valid kerberos ticket existing

### Meaning

The terminal emulation could not provide a valid
authentication ticket.

### Response

Please contact your software maintenance.

## KRB0017

Destination: USER-TASK Routing code: Weight: 99

Warranty : NO

KRB0017 Error during parsing the kerberos ticket

### Meaning

The authentication ticket provided by the terminal emulation
could not be parsed.

### Response

Please contact your software maintenance.

## KRB0018

Destination: USER-TASK Routing code: Weight: 99

Warranty : NO

KRB0018 Version error in terminal emulation

### Meaning

The terminal emulation is using a protocol version which is
not supported by this system.

### Response

Please contact the vendor of your terminal emulation.

## KRB0019

Destination: USER-TASK Routing code: Weight: 99

Warranty : NO

KRB0019 Connection lost during authentication

### Meaning

The terminal emulation has closed the connection during the
logon process.

## KRB0020

Destination: USER-TASK Routing code: Weight: 99

Warranty : NO

KRB0020 No valid entry in the kerberos key-table existing

### Meaning

The entry in the kerberos key-table for decrypting
the ticket does not exist.

### Response

Please contact your systemadministration.

## KRB0100

Destination: USER-TASK Routing code: Weight: 99

Warranty : NO

KRB0100 HELLO '(&00)'

### Meaning

Logs the Kerberos name of the client

©2020 Fujitsu Technology Solutions GmbH | BS2000 OSD/BC System Messages