2.2.1 KERB-EXT-ERROR

The KERB-EXT-ERROR structure SHOULD<4> be returned by the KDC to provide extended error information.

 typedef struct KERB_EXT_ERROR {
     unsigned long status;
     unsigned long reserved;
     unsigned long flags;
 } KERB_EXT_ERROR;

Status: An NTSTATUS value. For details about NTSTATUS values, see [MS-ERREF] section 2.3.

Reserved: Set to zero and MUST be ignored on receipt.

Flags: Set to 0x00000001. Other bit values SHOULD be ignored on receipt.