Hi people,
I have various load/speed troubles over my network. Not only on my location, but also with SAAS-services throuch MPLS-network or the other way around via VPN to my location.
I reported it with central IT who administrates the network connections. He showed me the "klist.exe" command as a way to prove Kerberos is working as it should.
It resulted in:
Credentials cache C:\Users\username\krb5cc_username not found.
He pointed to this as the main reason for my problems.
Searching the Internet give zero information, but the info that the client having this result uses probably NTLM to authenticate. That could explane (some) of the slow connections.
Config:
- Servers: Windows 2016 DC, domain functional level 2016
- Windows 2008R2 fileserver
- Synology NAS as archive
Client:
- Windows 7
- Windows 10
It happens on multiple clients, but, a client can have the problem one day while having normal multiple tickets the next day. Without me knowing why...
"klist.exe" on the domaincontrollers and the servers always results in Kerberos tickets.
On clients without tickets: "kinit.exe" creates a ticket, but no additional ticket is made when I access a new resource on the network.
Does anybody know a way to address this problem?
All the best,
Jan
