Digipass Plug-In for SBR Administrator Reference - Vasco
Digipass Plug-In for SBR Administrator Reference - Vasco
Digipass Plug-In for SBR Administrator Reference - Vasco
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
<strong>Digipass</strong> <strong>Plug</strong>-<strong>In</strong> <strong>for</strong> <strong>SBR</strong> <strong>Administrator</strong> <strong>Reference</strong> Error and Status Codes<br />
Error<br />
Code<br />
17.2 Status Code Listing<br />
Table 70: Status Code List<br />
Status<br />
Code<br />
0 No error<br />
<br />
Message Notes<br />
which fields are included in every other line of the file.<br />
This message indicates that the header line was not found, that<br />
it included unknown field names or that it was not a commaseparated<br />
list of field names.<br />
See the Import User Records topic in the online Help <strong>for</strong> the<br />
Administration MMC <strong>In</strong>terface <strong>for</strong> a definition of the import file<br />
header <strong>for</strong>mat.<br />
Message Notes<br />
The status codes from -1 downwards match the Error<br />
Codes above.<br />
1000 The credentials were invalid General-purpose failure due to invalid username or<br />
password, when a more specific status is unavailable.<br />
1002 The user failed the Windows Group<br />
Check<br />
The <strong>SBR</strong> <strong>Plug</strong>-<strong>In</strong> rejected an authentication request due to<br />
the Windows Group Check failing. This can occur when<br />
the effective Windows Group Check option is Authenticate<br />
listed groups, reject others.<br />
Note that the 'effective' setting is the effective setting of<br />
the Policy, unless the <strong>Digipass</strong> User Account overrides the<br />
Policy.<br />
1004 The challenge has expired A response to challenge has been given, but the expiration<br />
time <strong>for</strong> the challenge has expired. The default expiration<br />
time is one minute, however this can be configured in the<br />
configuration file VASCO/AAL3/Authlib/Challenge-<br />
Cache/Max-Age setting (in seconds).<br />
1005 The user does not have permission to<br />
per<strong>for</strong>m the specified action<br />
General-purpose failure of an administration command<br />
when the administrator does not have sufficient privileges<br />
to carry out the command.<br />
1007 The user account is locked The <strong>Digipass</strong> User Account is Locked. This is normally due<br />
to consecutive login failures, as determined by the Policy<br />
setting User Lock Threshold. Alternatively the<br />
administrator can actively lock the account.<br />
To unlock the User account, an administrator has to<br />
uncheck the Locked checkbox on the User record.<br />
1008 The One Time Password has already<br />
been used<br />
This status code occurs specifically when an OTP is rejected<br />
because it has already been used. It may also occur when<br />
the OTP has not been used but is older than the most<br />
recently used OTP.<br />
This can sometimes happen when an authentication<br />
request is re-sent automatically.<br />
1009 The user account is disabled The <strong>Digipass</strong> User Account is Disabled. This may be<br />
because the administrator has actively disabled the<br />
account, or because the corresponding Windows User<br />
account has become disabled or expired.<br />
1010 No user account was found An authentication request was rejected because no<br />
© 2006 VASCO Data Security <strong>In</strong>c. 181