pam_krb5 can't locate my KDC

[Michael B Allen]

I was just trying pam_krb5 for kicks but it can't find my KDC. My
/etc/krb5.conf is just:

[realms]
        WIN.NET = {
                kdc = ts0.win.net
        }

[domain_realm]
        .foo.net = WIN.NET
        foo.net = WIN.NET

I would think this should be sufficient no?

>From looking at a capture I can see it trying a TXT _kerberos.foo.net
lookup but even if I add a record for this with "WIN.NET" I see no
communication with the KDC.

Obviously I don't know what I'm doing. Can someone enlighten me?

Mike

-- 
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/