If your network environment uses a firewall or Network Address Translation (NAT), and you have a valid ticket-granting ticket (TGT) in the credentials cache, but receive an error when you request a service ticket from the KDC, troubleshoot your connections using the following procedure.
NOTE:Do not change your IP address if you can successfully connect using the default.
To configure the IP address used in the TGT
Start Kerberos Manager.
From themenu, choose .
From thetab, select a realm from the , and then click .
For the, perform one of the following tasks, and then click .
Specify the firewall or NAT IP address
Type up to four IP addresses separated by commas.
Obtain the IP address used by a given host on your network
Type a host name that is recognized on your network.
The ticket contains the IP address used by that host (and appears in thedialog box).
Obtain a ticket that contains no IP address
Delete the contents of thebox.
Specify the current IP address of your computer
The IP address of your computer resets to the value specified in yourdialog box, or assigned by your DHCP server.