Cannot contact any KDC for the requested realm
Noolyg
noolyg at yahoo.com
Thu Nov 27 07:42:34 EST 2003
Thanks for the answer, I think you are right about the DNS, but i have
the REALM entry in the krb5.ini (windows) it looks like that:
[libdefaults]
default_realm = MYREALM
default_tgs_enctypes = des-cbc-crc
default_tkt_enctypes = des-cbc-crc
forwardable = true
proxiable = true
[login]
krb4_convert = false
krb4_get_tickets = false
[realms]
MYREALM = {
admin_server = 172.16.13.110:88
default_domain = sks.kerb
kdc = 172.16.13.110:88
}
Is there something wrong with it?
Shold i add this somewhere else?
Thanks a lot.
jaltman2 at nyc.rr.com (Jeffrey Altman) wrote in message news:<3FC508B4.9090005 at nyc.rr.com>...
> You do not have a REALM entry in your krb5.conf file for the realm
> you are attempting to contact, so DNS is being used. But the local
> DNS server does not have the data and must propagate a query. The
> network has a long propagation delay and therefore the Kerberos
> client times out before the response arrives.
>
> The second time you attempt the tgt request, the local DNS server
> has the response cached so the response arrives before the timeout
> period.
>
More information about the Kerberos
mailing list