Configure the IP Address Used in the TGT

If your network environment uses a firewall or Network Address Translation (NAT), and you have a valid ticket-granting ticket (TGT) in the credentials cache, but receive an error when you request a service ticket from the KDC, troubleshoot your connections using the following procedure.

NOTE:Do not change your IP address if you can successfully connect using the default.

To configure the IP address used in the TGT

Start Kerberos Manager.
From the Configuration menu, choose Configure Realms.
From the Configuration tab, select a realm from the Realm list, and then click Properties.
Click the Realm Defaults tab.

For the Ticket Address, perform one of the following tasks, and then click OK.

To	Do this
Specify the firewall or NAT IP address	Type up to four IP addresses separated by commas.
Obtain the IP address used by a given host on your network	Type a host name that is recognized on your network. The ticket contains the IP address used by that host (and appears in the Credential Properties dialog box).
Obtain a ticket that contains no IP address	Delete the contents of the Ticket Address box.
Specify the current IP address of your computer	Click Reset. The IP address of your computer resets to the value specified in your Network Properties dialog box, or assigned by your DHCP server.