1. Kerberos for the busy admin
    1. http://blogs.technet.com/askds/archive/2008/03/06/kerberos-for-the-busy-admin.aspx
    2. A very good read
  2. Patterns and Practices (Kerberos Technical Supplement for Windows)
    1. http://msdn.microsoft.com/en-us/library/aa480609.aspx
  3. Troubleshooting Kerberos
    1. http://technet2.microsoft.com/windowsserver/en/library/26ce2e7f-52d6-4425-88cc-1573bc5e646d1033.mspx
    2. Troubleshooting Kerberos: Logon and Authentication; Security Services
    3. The most common Kerberos issues, including incorrect SPN's, time skew, UDP fragmentation, and the like. 90% of all Kerberos problems can be resolved with this article.
  4. Troubleshooting Kerberos Errors
    1. http://www.microsoft.com/downloads/details.aspx?FamilyID=7dfeb015-6043-47db-8238-dc7af89c93f1&displaylang=en
  5. Kerberos and LDAP Error Codes and what they mean
    1. http://technet.microsoft.com/en-us/library/bb463166.aspx#EBAA
  6. How to force Kerberos to use TCP instead of UDP in Windows Server 2003, in Windows XP, and in Windows 2000
    1. http://support.microsoft.com/default.aspx?scid=kb;en-us;244474
    2. Common cause of slow or failing Kerberos is UDP packet fragmentation.
    3. Sometimes caused by out of date network drivers, and/or configuration of VPN/Firewalls.
    4. One possible alternative while troubleshooting is to force Kerberos to use TCP instead.
  7. Kerberos Authentication Tools and Settings
    1. http://technet2.microsoft.com/WindowsServer/en/library/b36b8071-3cc5-46fa-be13-280aa43f2fd21033.mspx
    2. Tool listing and other settings that affect Kerberos.
  8. How the Kerberos Version 5 Authentication Protocol Works
    1. http://technet2.microsoft.com/WindowsServer/en/library/4a1daa3e-b45c-44ea-a0b6-fe8910f92f281033.mspx
    2. Complete architectural guide to how Kerberos 5 has been implemented in 2000 and 2003 AD.


  1. http://social.technet.microsoft.com/Search/en-US/?query=KDC_ERR_BADOPTION&ac=8