@Sadek M A properly functioning DNS server for your domain and functioning DNS resolvers on machines participating in your Kerberos realm is essential for the proper operation of your realm. Kerberos can use DNS as a service location protocol, by using the DNS SRV record as defined in RFC 2052 or use a TXT record to locate the appropriate realm for a given host or domain name. Are you using a MIT Kerberos? Can you update your krb5.conf on all the nodes by adding: [libdefaults] rdns = false Your problem is a DNS issue, that's the reason I wanted the entries in /etc/hosts. A workaround if you cluster is small you could propagate the correct hosts' files, while you resolve the DNS issue. Setting Up KDC Discovery Over DNS To use KDC discovery over DNS, the following records should be placed in the zone file corresponding to the Kerberos realm. In most cases, since the Kerberos realm name is simply an uppercase version of the DNS domain owned by the organization, these DNS entries are placed into the organization’s existing DNS zone file. Note, however, if the Kerberos realm and DNS domain differ, then a new zone must be created with the name of the Kerberos realm typical your network team should be able to help with the DNS zone update ! Your zone file example _kerberos._udp.MYREALM.FS. IN SRV 10 0 88 {your_kdc_server}.myrealm.fs. _kerberos._tcp.MYREALM.FS. IN SRV 10 0 88 {your_kdc_server}.myrealm.fs. _kerberos-adm._tcp.MYREALM.FS. IN SRV 1 0 749 {your_kdc_server}.myrealm.fs. Hope that helps ... View more