>> Is there a Kerberos error that could be returned that would cause >> clients to try a different KDC? (Other than simply not responding at >> all that is.) > >KDC_ERR_SVC_UNAVAILABLE (29) > >But it's generally not supported, I'm guessing. See BUG#3334 and http://www.padl.com/~lukeh/krb5-1.3.5-svc-unavailable.patch -- Luke --