13.04.2013 Views

Digipass Plug-In for SBR Administrator Reference - Vasco

Digipass Plug-In for SBR Administrator Reference - Vasco

Digipass Plug-In for SBR Administrator Reference - Vasco

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

<strong>Digipass</strong> <strong>Plug</strong>-<strong>In</strong> <strong>for</strong> <strong>SBR</strong> <strong>Administrator</strong> <strong>Reference</strong> Error and Status Codes<br />

Error<br />

Code<br />

17.2 Status Code Listing<br />

Table 70: Status Code List<br />

Status<br />

Code<br />

0 No error<br />

<br />

Message Notes<br />

which fields are included in every other line of the file.<br />

This message indicates that the header line was not found, that<br />

it included unknown field names or that it was not a commaseparated<br />

list of field names.<br />

See the Import User Records topic in the online Help <strong>for</strong> the<br />

Administration MMC <strong>In</strong>terface <strong>for</strong> a definition of the import file<br />

header <strong>for</strong>mat.<br />

Message Notes<br />

The status codes from -1 downwards match the Error<br />

Codes above.<br />

1000 The credentials were invalid General-purpose failure due to invalid username or<br />

password, when a more specific status is unavailable.<br />

1002 The user failed the Windows Group<br />

Check<br />

The <strong>SBR</strong> <strong>Plug</strong>-<strong>In</strong> rejected an authentication request due to<br />

the Windows Group Check failing. This can occur when<br />

the effective Windows Group Check option is Authenticate<br />

listed groups, reject others.<br />

Note that the 'effective' setting is the effective setting of<br />

the Policy, unless the <strong>Digipass</strong> User Account overrides the<br />

Policy.<br />

1004 The challenge has expired A response to challenge has been given, but the expiration<br />

time <strong>for</strong> the challenge has expired. The default expiration<br />

time is one minute, however this can be configured in the<br />

configuration file VASCO/AAL3/Authlib/Challenge-<br />

Cache/Max-Age setting (in seconds).<br />

1005 The user does not have permission to<br />

per<strong>for</strong>m the specified action<br />

General-purpose failure of an administration command<br />

when the administrator does not have sufficient privileges<br />

to carry out the command.<br />

1007 The user account is locked The <strong>Digipass</strong> User Account is Locked. This is normally due<br />

to consecutive login failures, as determined by the Policy<br />

setting User Lock Threshold. Alternatively the<br />

administrator can actively lock the account.<br />

To unlock the User account, an administrator has to<br />

uncheck the Locked checkbox on the User record.<br />

1008 The One Time Password has already<br />

been used<br />

This status code occurs specifically when an OTP is rejected<br />

because it has already been used. It may also occur when<br />

the OTP has not been used but is older than the most<br />

recently used OTP.<br />

This can sometimes happen when an authentication<br />

request is re-sent automatically.<br />

1009 The user account is disabled The <strong>Digipass</strong> User Account is Disabled. This may be<br />

because the administrator has actively disabled the<br />

account, or because the corresponding Windows User<br />

account has become disabled or expired.<br />

1010 No user account was found An authentication request was rejected because no<br />

© 2006 VASCO Data Security <strong>In</strong>c. 181

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!