Hi Max, are you going to backport this to Java 7? We are suffering from this on a regular basis because several KDCs are faulty returned by DNS SRVs. 30 s is not acceptable. Moreover, why is the property krb5.kdc.bad.policy not documented publically?
Thanks, Michael
