Dear Members,
We are facing some problem regarding the Kerberos protocol in our Web Server. Am giving some of them.
[FONT='Arial','sans-serif']
[/FONT][FONT='Arial','sans-serif']************************************************** ************************************************** ****[/FONT]
[FONT='Arial','sans-serif']A Kerberos Error Message was received:[/FONT]
[FONT='Arial','sans-serif'] on logon session [/FONT]
[FONT='Arial','sans-serif'] Client Time: [/FONT]
[FONT='Arial','sans-serif'] Server Time: 14:37:0.0000 [/FONT]2/12/2009 Z
[FONT='Arial','sans-serif'] Error Code: 0xd KDC_ERR_BADOPTION[/FONT]
[FONT='Arial','sans-serif'] Extended Error: 0xc00000bb KLIN(0)[/FONT]
[FONT='Arial','sans-serif']For more information, see Help and Support Center at [/FONT]
[FONT='Arial','sans-serif']************************************************** ************************************************** ****[/FONT]
[FONT='Arial','sans-serif']A Kerberos Error Message was received:[/FONT]
[FONT='Arial','sans-serif'] on logon session [/FONT]
[FONT='Arial','sans-serif'] Client Time: [/FONT]
[FONT='Arial','sans-serif'] Server Time: 21:31:35.0000 [/FONT]2/24/2009 Z
[FONT='Arial','sans-serif'] Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN[/FONT]
[FONT='Arial','sans-serif']For more information, see Help and Support Center at [/FONT]
[FONT='Arial','sans-serif']************************************************** ************************************************** ****[/FONT]
[FONT='Arial','sans-serif']A Kerberos Error Message was received:[/FONT]
[FONT='Arial','sans-serif'] on logon session ASIA-PAC\r.jaisundar-b[/FONT]
[FONT='Arial','sans-serif'] Client Time: [/FONT]
[FONT='Arial','sans-serif'] Server Time: 4:12:36.0000 [/FONT]2/25/2009 Z
[FONT='Arial','sans-serif'] Error Code: 0x34 KRB_ERR_RESPONSE_TOO_BIG[/FONT]
[FONT='Arial','sans-serif']************************************************** ************************************************** ****[/FONT]
[FONT='Arial','sans-serif']

I searched for KRB_ERR_RESPONSE_TOO_BIG error and foind that the response is too big (bigger packet size) and I need to make sure that TCP is used as protocol instead of UDP. This can be done by editing the reistry. Am giving both the URLs.
http://mailman.mit.edu/pipermail/kerberos/2006-February/009323.html
[FONT='Arial','sans-serif']http://support.microsoft.com/kb/244474

My problem is, I am not able to confirm that all these errors are because of bigger packet size or some thing else.
Has any one faced this kind of issue? Please let me know your views. Am little reluctant to do registry modification as it is a server and not in our maintenance.
[/FONT][/FONT]