Kerberos configuration change, July 5, 2017

On Wednesday, July 5, 2017, during the maintenance window of 5 to 7 a.m., the Penn State Access Account Kerberos authentication service (dce.psu.edu realm) will undergo a configuration change in order to prepare for an upgrade later in July. During the change, users may see a few seconds delay at most in authenticating. This configuration change will remove the default referral behavior from the dce.psu.edu realm to the ACCESS.PSU.EDU Active Directory domain and replace it with explicit referral configurations. This configuration change should only affect access of some clients to servers bound to the ACCESS domain. Server administrators impacted have been contacted with more detailed information.

This change is described in Service Now as CHG0042677.

More information: Kerberos configuration change, July 5, 2017