control: tags -1 help Apologies for the long delay.
It looks like the problem here is in fact DNS. It sounds like the k5start process cannot look up the IP of the KDC even after the network comes back. Other processes like dig function, but those processes are not making periodic requests of the same domain entry within the same process while the network is down and after it comes up. Ben and I still have not managed to reproduce this situation. --Sam