You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
214 lines
7.4 KiB
214 lines
7.4 KiB
;/*++
|
|
;
|
|
;Copyright (c) 1995 Microsoft Corporation
|
|
;
|
|
;Module Name:
|
|
;
|
|
; kdcevent.h
|
|
;
|
|
;Abstract:
|
|
;
|
|
; Definitions for POP3 Server Events
|
|
;
|
|
;Author:
|
|
;
|
|
; RichardW, 3 Mar 95
|
|
;
|
|
;Revision History:
|
|
;
|
|
;Notes:
|
|
;
|
|
; This file is generated by the MC tool from the pop3evnt.mc file.
|
|
;
|
|
;--*/
|
|
;
|
|
;
|
|
;#ifndef __KDCEVENT_H__
|
|
;#define __KDCEVENT_H__
|
|
;
|
|
|
|
|
|
SeverityNames=(Success=0x0:STATUS_SEVERITY_SUCCESS
|
|
Informational=0x1:STATUS_SEVERITY_INFORMATIONAL
|
|
Warning=0x2:STATUS_SEVERITY_WARNING
|
|
Error=0x3:STATUS_SEVERITY_ERROR
|
|
)
|
|
|
|
MessageId=1 Severity=Success SymbolicName=CATEGORY_KDC
|
|
Language=English
|
|
KDC
|
|
.
|
|
|
|
MessageId= Severity=Success SymbolicName=CATEGORY_MAX_CATEGORY
|
|
Language=English
|
|
Max
|
|
.
|
|
|
|
MessageId= Severity=Warning SymbolicName=KDCEVENT_UNKNOWN_PRINCIPAL
|
|
Language=English
|
|
Could not find principal %1
|
|
.
|
|
|
|
MessageId= Severity=Warning SymbolicName=KDCEVENT_FAILED_DOMAIN_CREDS
|
|
Language=English
|
|
Domain %1 propagated to us but did not authenticate
|
|
.
|
|
|
|
MessageId= Severity=Error SymbolicName=KDCEVENT_POLICY_UPDATE_FAILED
|
|
Language=English
|
|
The KDC failed to update policy class %1. The error is in the data.
|
|
.
|
|
|
|
MessageId= Severity=Error SymbolicName=KDCEVENT_DOMAIN_LIST_UPDATE_FAILED
|
|
Language=English
|
|
The KDC failed to update the trusted domain list. The error is in the data.
|
|
.
|
|
|
|
MessageId= Severity=Error SymbolicName=KDCEVENT_SAM_CALL_FAILED
|
|
Language=English
|
|
The Security Account Manager failed a KDC request in an unexpected way. The
|
|
error is in the data field. The account name was %1 and lookup type %2.
|
|
.
|
|
|
|
MessageId= Severity=Error SymbolicName=KDCEVENT_NO_KEY_TYPE
|
|
Language=English
|
|
The account %1 did not have a suitable key for generating a Kerberos ticket.
|
|
If the encryption type is supported, changing or setting the password will
|
|
generate a proper key. The missing key type may be in the data field.
|
|
.
|
|
|
|
MessageId= Severity=Success SymbolicName=KDCEVENT_KRBTGT_PASSWORD_CHANGED
|
|
Language=English
|
|
The password on the KRBTGT account was changed.
|
|
.
|
|
|
|
MessageId= Severity=Error SymbolicName=KDCEVENT_KRBTGT_PASSWORD_CHANGE_FAILED
|
|
Language=English
|
|
The attempt to change the password on the KRBTGT account failed. The error
|
|
code is in the data field
|
|
.
|
|
|
|
MessageId= Severity=Error SymbolicName=KDCEVENT_NAME_NOT_UNIQUE
|
|
Language=English
|
|
There are multiple accounts with name %1 of type %2.
|
|
.
|
|
|
|
MessageId= Severity=Warning SymbolicName=KDCEVENT_FAILED_TRANSITIVE_TRUST
|
|
Language=English
|
|
A request failed from client realm %1 for a ticket in realm %2.
|
|
This failed because a trust link between the realms is non transitive.
|
|
.
|
|
|
|
MessageId= Severity=Error SymbolicName=KDCEVENT_CORRUPT_CREDENTIALS
|
|
Language=English
|
|
The account for %1 has corrupt keys stored in the DS. Changing
|
|
or setting the password should restore correct keys.
|
|
.
|
|
|
|
MessageId= Severity=Error SymbolicName=KDCEVENT_NO_KEY_INTERSECTION_AS
|
|
Language=English
|
|
While processing an AS request for target service %1, the account %2 did not
|
|
have a suitable key for generating a Kerberos ticket (the missing key has an ID
|
|
of %3). The requested etypes were %4. The accounts available etypes were %5.
|
|
Changing or resetting the password of %6 will generate a proper key.
|
|
.
|
|
|
|
MessageId= Severity=Error SymbolicName=KDCEVENT_INVALID_FORWARDED_AS_REQ
|
|
Language=English
|
|
The request for an AS ticket for client %1 was forwarded to the PDC. An
|
|
invalid response to this forwarded request was detected and could indicate an
|
|
attempt to spoof your PDC. There may be additional information in the data field.
|
|
.
|
|
|
|
MessageId= Severity=Error SymbolicName=KDCEVENT_NO_KEY_INTERSECTION_TGS
|
|
Language=English
|
|
While processing a TGS request for the target server %1, the account %2 did not
|
|
have a suitable key for generating a Kerberos ticket (the missing key has an ID
|
|
of %3). The requested etypes were %4. The accounts available etypes were %5.
|
|
Changing or resetting the password of %6 will generate a proper key.
|
|
.
|
|
|
|
MessageId= Severity=Error SymbolicName=KDCEVENT_INVALID_POLICY
|
|
Language=English
|
|
When updating policy class %1, the KDC encountered invalid policy data
|
|
and has failed to update the policy.
|
|
.
|
|
|
|
MessageId= Severity=Error SymbolicName=KDCEVENT_PAC_VERIFICATION_FAILURE
|
|
Language=English
|
|
During TGS processing, the KDC was unable to verify the signature on the
|
|
PAC from %1. This indicates the PAC was modified.
|
|
.
|
|
|
|
|
|
MessageId= Severity=Warning SymbolicName=KDCEVENT_NO_KDC_CERTIFICATE
|
|
Language=English
|
|
This event indicates an attempt was made to use smartcard logon,
|
|
but the KDC is unable to use the PKINIT protocol because it is missing a
|
|
suitable certificate.
|
|
.
|
|
|
|
MessageId= Severity=Warning SymbolicName=KDCEVENT_INVALID_KDC_CERTIFICATE
|
|
Language=English
|
|
The currently selected KDC certificate was once valid, but now is invalid
|
|
and no suitable replacement was found. Smartcard logon may not function correctly
|
|
if this problem is not remedied. Have the system administrator check on the
|
|
state of the domain's public key infrastructure. The chain status is in
|
|
the error data.
|
|
.
|
|
|
|
MessageId= Severity=Warning SymbolicName=KDCEVENT_INVALID_CLIENT_CERTIFICATE
|
|
Language=English
|
|
The client certificate for the user %1\%2 is not valid, and resulted in a
|
|
failed smartcard logon. Please contact the user for more information
|
|
about the certificate they're attempting to use for smartcard logon. The
|
|
chain status was : %3
|
|
.
|
|
|
|
MessageId= Severity=Warning SymbolicName=KDCEVENT_TRUST_LOOP
|
|
Language=English
|
|
The KDC encountered a trust loop when building a list of trusted domains.
|
|
This indicates that the route to the domain %1 from this KDC has more than
|
|
one possible trust path.
|
|
.
|
|
|
|
MessageId= Severity=Warning SymbolicName=KDCEVENT_MALFORMED_MESSAGE
|
|
Language=English
|
|
The KDC received invalid messages of type %1.
|
|
.
|
|
|
|
MessageId= Severity=Informational SymbolicName=KDCEVENT_POLICY_USER2USER_REQUIRED
|
|
Language=English
|
|
A service ticket request by client %1 for %2 was rejected because User2User was
|
|
required. The KDC responds with this error when a client requests a service ticket
|
|
for a user principal (a security risk). The client must support User2User in order
|
|
to obtain a service ticket for the requested service principal
|
|
.
|
|
|
|
MessageId= Severity=Warning SymbolicName=KDCEVENT_S4USELF_ACCESS_FAILED
|
|
Language=English
|
|
The account %1 from domain %2 is attempting to use S4USelf for the target client %3,
|
|
but is not allowed to perform group expansion on this client's user object.
|
|
It may be necessary to adjust the ACL on the TokenGroupsGlobalAndUniversal
|
|
attribute on the target client's user object to allow S4USelf to function correctly.
|
|
This can also be accomplished by adding %1 to the Windows Authorization Access Group.
|
|
.
|
|
|
|
|
|
MessageId= Severity=Error SymbolicName=KDCEVENT_UNSUPPORTED_ETYPE_REQUEST_AS
|
|
Language=English
|
|
While processing an AS request for target service %1, the account %2 did not
|
|
have a suitable key for generating a Kerberos ticket (the missing key has an ID
|
|
of %3). The requested etypes were %4. The accounts available etypes were %5.
|
|
.
|
|
|
|
MessageId= Severity=Error SymbolicName=KDCEVENT_UNSUPPORTED_ETYPE_REQUEST_TGS
|
|
Language=English
|
|
While processing a TGS request for the target server %1, the account %2 did not
|
|
have a suitable key for generating a Kerberos ticket (the missing key has an ID
|
|
of %3). The requested etypes were %4. The accounts available etypes were %5.
|
|
.
|
|
|
|
;
|
|
;#endif // __KDCEVENT_H_
|
|
;
|