Failed primary KDC - Can't login

[Sam Hartman]

You're certainly seeing timeout problems, and LDAP is certainly
contributing.  I'm a bit concerned that you are seeing such a long
delay between the initial as_req and the response with preauth.

I'll try and remember to talk to Ken Raeburn later today about this;
some comments he made recently about the retry logic in send_to_kdc
spring to mind.

We may have moredesirable  behavior in this regard for the 1.3
release of Kerberos.