cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1174
Views
0
Helpful
1
Replies

Active Directory Login Issue

jpannorfi
Level 1
Level 1

KRB Error: KRB5Krb_ERR_RESPONSE_TOO_BIG

Looking online I see that the explanation for this error is as follows: The server response is too big for a UDP packet.

This can occur when the user is in a large number of AD groups and the UDP packet(s) becomes too large and cannot be supported by the UDP Protocol. The permanent fix seems to be what Microsoft stated, to switch to TCP. This is not attributed to a network issue or a limitation of our LAN... It appears to be a limitation of the UDP Protocol. This of course would lead to fragmentation of the UDP packet, Microsoft should have given a better explanation of their findings as to not conclude that this was being cause by an inherent network issue.

My question is: When I try and connect to the AD Server from some other siwtches in the network it seems fine. All switches have the same IOS and I know it can't be network related because its a flat network. Not sure wht I get long logins from some switches on the network and not others? No errors on the siwtches.

Other findings that may help: 

1 Reply 1

jimmy1829
Level 1
Level 1

We are experiencing the same issue.

Anyone has any clue?

Jimmy

Review Cisco Networking for a $25 gift card