KRB_FORWARD_REJECT
case KRB_FORWARD_REJECT:
case KRB_FORWARD_REJECT: /* Forwarded credentials rejected */
reply_to_client(ap, KRB_FORWARD_REJECT, errbuf, -1);