Thanks for the answer, I think you are right about the DNS, but i have
the REALM entry in the krb5.ini (windows) it looks like that:

[libdefaults]
        default_realm = MYREALM
        default_tgs_enctypes = des-cbc-crc
        default_tkt_enctypes = des-cbc-crc
        forwardable = true
        proxiable = true
[login]
        krb4_convert = false
        krb4_get_tickets = false
[realms]
        MYREALM = {
                admin_server = 172.16.13.110:88
                default_domain = sks.kerb
                kdc = 172.16.13.110:88
        }

Is there something wrong with it?
Shold i add this somewhere else?

Thanks a lot.

[EMAIL PROTECTED] (Jeffrey Altman) wrote in message news:<[EMAIL PROTECTED]>...
> You do not have a REALM entry in your krb5.conf file for the realm
> you are attempting to contact, so DNS is being used.  But the local
> DNS server does not have the data and must propagate a query.  The
> network has a long propagation delay and therefore the Kerberos
> client times out before the response arrives.
> 
> The second time you attempt the tgt request, the local DNS server
> has the response cached so the response arrives before the timeout
> period.
>
________________________________________________
Kerberos mailing list           [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to