1231879 - Intermittent and consistent problems with kerberos configurations that include java AD, .net kerberos SSO, and vintela SSO

• Users may fail to SSO at some times and work others
• Users may fail to login or SSO consistantly 
• Overall slowness or long login times
• Java AD logings take a long time or fail due to timeout.  You may see the following error in your detailed Java Application Server logs:
• cause:javax.security.auth.login.LoginException: Receive timed out
• Network captures via KB 1370469 state: krb5krb_err_response_too_big
• The following logs were noted in XI 3.1 with tomcat 5.5 and resolved with the TCP settings in the resolution section

>>> KrbKdcReq send: kdc=dcservername UDP:88, timeout=30000, number of retries =3, #bytes=2956
>>> KDCCommunication: kdc=dcservername UDP:88, timeout=30000,Attempt =1, #bytes=2956 SocketTimeOutException with attempt: 1
>>> KDCCommunication: kdc=dcservername UDP:88, timeout=30000,Attempt =2, #bytes=2956 SocketTimeOutException with attempt: 2
>>> KDCCommunication: kdc=dcservername UDP:88, timeout=30000,Attempt =3, #bytes=2956 SocketTimeOutException with attempt: 3

kerberos udp tcp timeout java ad vintela intermittent problems logon fails sometimes cannot login login fails SSO fails SSO intermittent "Too big for UDP, trying TCP" Too big for UDP, trying TCP krb5krb_err_response_too_big krb5krb err response too big , KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , Problem