{"id":9235,"date":"2025-09-12T07:28:27","date_gmt":"2025-09-12T07:28:27","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=9235"},"modified":"2025-09-12T07:28:29","modified_gmt":"2025-09-12T07:28:29","slug":"azure-files-kerberos-the-system-cannot-contact-a-domain-controller-to-service-the-authentication-requet-please-try-again-later","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/research\/azure-files-kerberos-the-system-cannot-contact-a-domain-controller-to-service-the-authentication-requet-please-try-again-later","title":{"rendered":"Azure Files – Kerberos – The System Cannot contact a domain controller to service the Authentication Requet. Please try again later"},"content":{"rendered":"\n

Randomly, Azure Files with Kerberos were disconnecting with<\/p>\n\n\n\n

<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

running klist purge<\/strong> fixed the issue<\/p>\n\n\n\n

The cause of that turned out to be Kerberos Negative Caching on Windows Machines<\/strong>.<\/p>\n\n\n\n

Kerberos Negative Caching<\/strong> on Windows machines refers to the process where the system temporarily stores (caches) failed Kerberos authentication attempts. This caching helps to reduce the load on the Key Distribution Center (KDC) by preventing repeated attempts to authenticate with the same invalid credentials.<\/em><\/p>\n\n\n\n

in\u00a0this<\/a>\u00a0article of Microsoft, it is described what this Kerberos negative caching is. The default\u00a0caching time<\/strong>\u00a0is\u00a010 minutes<\/strong>. It turned out for me if I just waited for 10 minutes, or executed\u00a0KLIST PURGE_BIND<\/strong>\u00a0<\/p>\n\n\n\n

Create a DWORD registry key\u00a0FarKdcTimeout<\/strong>\u00a0under To value 0 <\/p>\n\n\n\n

HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Lsa\\Kerberos\\Parameters.
<\/p>\n","protected":false},"excerpt":{"rendered":"

Randomly, Azure Files with Kerberos were disconnecting with running klist purge fixed the issue The cause of that turned out to be Kerberos Negative Caching on Windows Machines. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-9235","post","type-post","status-publish","format-standard","hentry","category-research"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t