What was the resolution about why we are talking to DCs when a client authenticates with Kerberos

[Simo]

On Tue, 2015-08-04 at 15:58 -0700, Richard Sharpe wrote:
> Hi folks,
> 
> I recall some discussion that we were contacting DCs even when a
> client authenticates with Kerberos 5.
> 
> There was a suggestion that we should not be doing that.
> 
> Was the investigation of why we are doing it completed? What was the 
> resolution?

Define: contacting the DC.
For what operations ?