pause in KLAcquireNewInitialTicketsWithPassword

[Prabhakaran vaidya]

Mac OS X 10.3 client.

   Our login app (cocoa) was hanging for a long time (roughly 2 minutes 
or so) and when I took a sample from Activity viewer
this is what I got. This does not happen every time.


                          281 KLAcquireNewInitialTicketsWithPassword
                                               281 
KLAcquireNewInitialTicketCredentialsWithPassword
                                                 281 
__KLPrincipalShouldUseKerberos524Protocol
                                                   281 
__KLRealmHasKerberos4
                                                     281 
__KLRealmHasKerberos4DNSServiceRecord
                                                       281 
__KLRealmHasDNSServiceRecord
                                                         281 res_search
                                                           281 
res_querydomain
                                                             281 
res_query
                                                               281 
res_send
                                                                 281 
select
                                                                   281 
select

Any idea what it could be ? My KDC is configured for Kerberos 5 only. 
Is there any way to avoid kerberos 4 related calls
completely from a client.
Looked at the __KLRealmHasDNSServiceRecord implementation and it has 
this line
  if (__KLPreferencesGetLibDefaultBoolean ("dns_fallback", true)) {
I am hoping I can set this param somewhere in my config file and avoid 
the DNS lookup...

Thanks
-prab