{"id":9235,"date":"2025-09-12T07:28:27","date_gmt":"2025-09-12T07:28:27","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=9235"},"modified":"2025-09-12T07:28:29","modified_gmt":"2025-09-12T07:28:29","slug":"azure-files-kerberos-the-system-cannot-contact-a-domain-controller-to-service-the-authentication-requet-please-try-again-later","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/research\/azure-files-kerberos-the-system-cannot-contact-a-domain-controller-to-service-the-authentication-requet-please-try-again-later","title":{"rendered":"Azure Files &#8211; Kerberos &#8211; The System Cannot contact a domain controller to service the Authentication Requet. Please try again later"},"content":{"rendered":"\n<p>Randomly, Azure Files with Kerberos were disconnecting with<\/p>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/09\/image-6.png\"><img loading=\"lazy\" decoding=\"async\" width=\"438\" height=\"97\" src=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/09\/image-6.png\" alt=\"\" class=\"wp-image-9236 img-responsive\" srcset=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/09\/image-6.png 438w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2025\/09\/image-6-300x66.png 300w\" sizes=\"auto, (max-width: 438px) 100vw, 438px\" \/><\/a><\/figure>\n\n\n\n<p>running <strong>klist purge<\/strong> fixed the issue<\/p>\n\n\n\n<p>The cause of that turned out to be&nbsp;<strong>Kerberos Negative Caching on Windows Machines<\/strong>.<\/p>\n\n\n\n<p><em><strong>Kerberos Negative Caching<\/strong>&nbsp;on Windows machines refers to the process where the system temporarily stores (caches) failed Kerberos authentication attempts. This caching helps to reduce the load on the Key Distribution Center (KDC) by preventing repeated attempts to authenticate with the same invalid credentials.<\/em><\/p>\n\n\n\n<p>in\u00a0<a href=\"https:\/\/learn.microsoft.com\/en-us\/entra\/global-secure-access\/how-to-configure-kerberos-sso#how-to-avoid-kerberos-negative-caching-on-windows-machines\">this<\/a>\u00a0article of Microsoft, it is described what this Kerberos negative caching is. The default\u00a0<strong>caching time<\/strong>\u00a0is\u00a0<strong>10 minutes<\/strong>. It turned out for me if I just waited for 10 minutes, or executed\u00a0<strong>KLIST PURGE_BIND<\/strong>\u00a0<\/p>\n\n\n\n<p>Create a DWORD registry key\u00a0<strong>FarKdcTimeout<\/strong>\u00a0under To value 0 <\/p>\n\n\n\n<p>HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Lsa\\Kerberos\\Parameters.<br><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Randomly, Azure Files with Kerberos were disconnecting with running klist purge fixed the issue The cause of that turned out to be&nbsp;Kerberos Negative Caching on Windows Machines. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-9235","post","type-post","status-publish","format-standard","hentry","category-research"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/9235","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/comments?post=9235"}],"version-history":[{"count":1,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/9235\/revisions"}],"predecessor-version":[{"id":9237,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/9235\/revisions\/9237"}],"wp:attachment":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/media?parent=9235"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/categories?post=9235"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/tags?post=9235"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}